Description
In the Linux kernel, the following vulnerability has been resolved: net: usb: kalmia: validate USB endpoints The kalmia driver should validate that the device it is probing has the proper number and types of USB endpoints it is expecting before it binds to it. If a malicious device were to not have the same urbs the driver will crash later on when it blindly accesses these endpoints.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
d40261236e8e278cb1936cb5e934262971692b10 to < ff675bc5b3e8c356f9d993d65d0bae6ed0dc7459affectedd40261236e8e278cb1936cb5e934262971692b10 to < 185050b47df3d41e49f20ad01beea2e7b9cddaa7affectedd40261236e8e278cb1936cb5e934262971692b10 to < 28a380bfa5bc7f6a9380b85e8eab919ee6ac1701affectedd40261236e8e278cb1936cb5e934262971692b10 to < 12c0243de0aee0ab27cc00932fd5edae65c1e3a2affectedd40261236e8e278cb1936cb5e934262971692b10 to < 51c20ea5f1555a984c041b0dbf56f00d41b9e652affectedd40261236e8e278cb1936cb5e934262971692b10 to < 011684cd18349aa4c52167c8ac37a0524169f48caffectedd40261236e8e278cb1936cb5e934262971692b10 to < 7bfda1a0be4caec3263753d567678451cef73a85affectedd40261236e8e278cb1936cb5e934262971692b10 to < c58b6c29a4c9b8125e8ad3bca0637e00b71e2693affected
Linux Linux
Default version status: affected
3.0affected0 to < 3.0unaffected5.10.253 to ≤ 5.10.*unaffected5.15.203 to ≤ 5.15.*unaffected6.1.167 to ≤ 6.1.*unaffected6.6.130 to ≤ 6.6.*unaffected6.12.77 to ≤ 6.12.*unaffected6.18.17 to ≤ 6.18.*unaffected6.19.7 to ≤ 6.19.*unaffected7.0 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/ff675bc5b3e8c356f9d993d65d0bae6ed0dc7459 ↗
- https://git.kernel.org/stable/c/185050b47df3d41e49f20ad01beea2e7b9cddaa7 ↗
- https://git.kernel.org/stable/c/28a380bfa5bc7f6a9380b85e8eab919ee6ac1701 ↗
- https://git.kernel.org/stable/c/12c0243de0aee0ab27cc00932fd5edae65c1e3a2 ↗
- https://git.kernel.org/stable/c/51c20ea5f1555a984c041b0dbf56f00d41b9e652 ↗
- https://git.kernel.org/stable/c/011684cd18349aa4c52167c8ac37a0524169f48c ↗
- https://git.kernel.org/stable/c/7bfda1a0be4caec3263753d567678451cef73a85 ↗
- https://git.kernel.org/stable/c/c58b6c29a4c9b8125e8ad3bca0637e00b71e2693 ↗
- https://cert-portal.siemens.com/productcert/html/ssa-082556.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-457936.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-784472.html ↗