HID: hid-thrustmaster: fix stack-out-of-bounds read in usb_check_int_endpoints() (Linux Linux)
En bref
- Source
- NVD
- EPSS
- EPSS 0.23 % · centile 14 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- Linux
- Statut NVD
- Modified
Rechercher sur…
Description
In the Linux kernel, the following vulnerability has been resolved: HID: hid-thrustmaster: fix stack-out-of-bounds read in usb_check_int_endpoints() Syzbot[1] has detected a stack-out-of-bounds read of the ep_addr array from hid-thrustmaster driver. This array is passed to usb_check_int_endpoints function from usb.c core driver, which executes a for loop that iterates over the elements of the passed array. Not finding a null element at the end of the array, it tries to read the next, non-existent element, crashing the kernel. To fix this, a 0 element was added at the end of the array to break the for loop. [1] https://syzkaller.appspot.com/bug?extid=9c9179ac46169c56c1ad
Faiblesses (CWE)
- CWE-125 — Lecture hors limites
Références
- https://git.kernel.org/stable/c/436f48c864186e9413d1b7c6e91767cc9e1a65b8
- https://git.kernel.org/stable/c/f3ce05283f6cb6e19c220f5382def43dc5bd56b9
- https://git.kernel.org/stable/c/cdd9a1ea23ff1a272547217100663e8de4eada40
- https://git.kernel.org/stable/c/73e36a699b9f46322ffb81f072a24e64f728dba7
- https://git.kernel.org/stable/c/0b43d98ff29be3144e86294486b1373b5df74c0e
- https://lists.debian.org/debian-lts-announce/2025/03/msg00028.html
Scores
| Version | Score | Vecteur | Évalué par |
|---|---|---|---|
| CVSS 3.1 | HIGH 7.1 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H | CISA-ADP |
| CVSS 3.1 | HIGH 7.1 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H | NVD · nvd@nist.gov (Primary) |
| CVSS 3.1 | HIGH 7.1 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H | NVD · 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary) |
Références européennes
- ENISA EUVD · EUVD-2025-5130
- GCVE · GCVE-0-2025-21794
Avis du CERT-FR
- CERTFR-2025-AVI-0509 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2025-AVI-0307 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2025-AVI-0277 — Multiples vulnérabilités dans le noyau Linux de Debian LTS · cert.ssi.gouv.fr
Configurations affectées (CPE NVD)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 6.6.76 < 6.6.79cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 6.12.13 < 6.12.16cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 6.13.2 < 6.13.4cpe:2.3:o:linux:linux_kernel:6.14:rc1:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:6.14:rc2:*:*:*:*:*:*
Produits affectés
| Produit | Versions |
|---|---|
| Linux · Linux | affected 220883fba32549a34f0734e4859d07f4dcd56992 < 436f48c864186e9413d1b7c6e91767cc9e1a65b8 ; affected ae730deded66150204c494282969bfa98dc3ae67 < f3ce05283f6cb6e19c220f5382def43dc5bd56b9 ; affected e5bcae4212a6a4b4204f46a1b8bcba08909d2007 < cdd9a1ea23ff1a272547217100663e8de4eada40 ; affected 816e84602900f7f951458d743fa12769635ebfd5 < 73e36a699b9f46322ffb81f072a24e64f728dba7 ; affected 50420d7c79c37a3efe4010ff9b1bb14bc61ebccf < 0b43d98ff29be3144e86294486b1373b5df74c0e |
| Linux · Linux | affected 6.6.76 < 6.6.79 ; affected 6.12.13 < 6.12.16 ; affected 6.13.2 < 6.13.4 |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |