Description
In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - validate control endpoint type The driver currently assumes that the first endpoint of the control interface is an interrupt IN endpoint without verifying it. A malicious device could provide a different endpoint type, which would then be passed to usb_fill_int_urb(), potentially leading to kernel warnings or undefined behavior. Verify that the control endpoint is an interrupt IN endpoint.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
628329d52474323938a03826941e166bc7c8eff4 to < 5de5075a1f26166f172b6687cb66810a9b61e3ebaffected628329d52474323938a03826941e166bc7c8eff4 to < 7960d99332e03705ec622d92f31e0c77de8baac6affected628329d52474323938a03826941e166bc7c8eff4 to < 5b96b4da96313dd799a3a40dcfd598d2e2c19217affected628329d52474323938a03826941e166bc7c8eff4 to < aa1885f87e60c80e59e50ffd5fb096bf02c83e05affected628329d52474323938a03826941e166bc7c8eff4 to < a630508a09b0c05f14bc0843ed409221a93751aaaffected628329d52474323938a03826941e166bc7c8eff4 to < c8d3d83f2eaaf7659de76e8d44e8fc88ee346042affected628329d52474323938a03826941e166bc7c8eff4 to < cbfa059dfb48b9aa322e34fd44a093d9ca29ad7eaffected628329d52474323938a03826941e166bc7c8eff4 to < baf56975806534268e24acf9a8abb1c447ce11e9affected
Linux Linux
Default version status: affected
3.10affected0 to < 3.10unaffected5.10.261 to ≤ 5.10.*unaffected5.15.212 to ≤ 5.15.*unaffected6.1.178 to ≤ 6.1.*unaffected6.6.145 to ≤ 6.6.*unaffected6.12.97 to ≤ 6.12.*unaffected6.18.40 to ≤ 6.18.*unaffected7.1.5 to ≤ 7.1.*unaffected7.2 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/5de5075a1f26166f172b6687cb66810a9b61e3eb ↗
- https://git.kernel.org/stable/c/7960d99332e03705ec622d92f31e0c77de8baac6 ↗
- https://git.kernel.org/stable/c/5b96b4da96313dd799a3a40dcfd598d2e2c19217 ↗
- https://git.kernel.org/stable/c/aa1885f87e60c80e59e50ffd5fb096bf02c83e05 ↗
- https://git.kernel.org/stable/c/a630508a09b0c05f14bc0843ed409221a93751aa ↗
- https://git.kernel.org/stable/c/c8d3d83f2eaaf7659de76e8d44e8fc88ee346042 ↗
- https://git.kernel.org/stable/c/cbfa059dfb48b9aa322e34fd44a093d9ca29ad7e ↗
- https://git.kernel.org/stable/c/baf56975806534268e24acf9a8abb1c447ce11e9 ↗