Description
In the Linux kernel, the following vulnerability has been resolved: net: usb: pegasus: validate USB endpoints The pegasus driver should validate that the device it is probing has the proper number and types of USB endpoints it is expecting before it binds to it. If a malicious device were to not have the same urbs the driver will crash later on when it blindly accesses these endpoints.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < d5d9086211877361f1bda44a0aec538ddb04042aaffected1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < af7369ae572f53cb701731a4289ec3b3889bc501affected1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 43d7c4114b1ec14f41f09306525d3b9382286fc1affected1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 7f8505c7ce3f186ef9d2495f3c0bd6ad6fce999faffected1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 95556b4e879711693c9865ba0938c148f62d5ea4affected1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < c3f1672eaea68c5cb6e1ec081cdb92045453218faffected1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < ee31ec8cf1eafeefa85ef934ba688d27f88bf0e2affected1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 11de1d3ae5565ed22ef1f89d73d8f2d00322c699affected
Linux Linux
Default version status: affected
2.6.12affected0 to < 2.6.12unaffected5.10.253 to ≤ 5.10.*unaffected5.15.203 to ≤ 5.15.*unaffected6.1.167 to ≤ 6.1.*unaffected6.6.130 to ≤ 6.6.*unaffected6.12.77 to ≤ 6.12.*unaffected6.18.17 to ≤ 6.18.*unaffected6.19.7 to ≤ 6.19.*unaffected7.0 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/d5d9086211877361f1bda44a0aec538ddb04042a ↗
- https://git.kernel.org/stable/c/af7369ae572f53cb701731a4289ec3b3889bc501 ↗
- https://git.kernel.org/stable/c/43d7c4114b1ec14f41f09306525d3b9382286fc1 ↗
- https://git.kernel.org/stable/c/7f8505c7ce3f186ef9d2495f3c0bd6ad6fce999f ↗
- https://git.kernel.org/stable/c/95556b4e879711693c9865ba0938c148f62d5ea4 ↗
- https://git.kernel.org/stable/c/c3f1672eaea68c5cb6e1ec081cdb92045453218f ↗
- https://git.kernel.org/stable/c/ee31ec8cf1eafeefa85ef934ba688d27f88bf0e2 ↗
- https://git.kernel.org/stable/c/11de1d3ae5565ed22ef1f89d73d8f2d00322c699 ↗
- https://cert-portal.siemens.com/productcert/html/ssa-082556.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-457936.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-784472.html ↗