Orta CVSS 5.5
CVE-2024-57993: Linux Kernel: güvenlik açığı
Açıklama (NVD)
In the Linux kernel, the following vulnerability has been resolved: HID: hid-thrustmaster: Fix warning in thrustmaster_probe by adding endpoint check syzbot has found a type mismatch between a USB pipe and the transfer endpoint, which is triggered by the hid-thrustmaster driver[1]. There is a number of similar, already fixed issues [2]. In this case as in others, implementing check for endpoint type fixes the issue. [1] https://syzkaller.appspot.com/bug?extid=040e8b3db6a96908d470 [2] https://syzkaller.appspot.com/bug?extid=348331f63b034f89b622
Özet bilgiler
- Ürün
- Linux Linux Kernel
- CVSS v3.1
- 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - EPSS
- %0,21 (yüzdelik 11)
- Yama
- Mevcut
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| linux-linux-kernel | 5.13 | — | 6.1.129 |
| linux-linux-kernel | 6.2 | — | 6.6.76 |
| linux-linux-kernel | 6.7 | — | 6.12.13 |
| linux-linux-kernel | 6.13 | — | 6.13.2 |