Към съдържанието
Търсене

CVE-2026-31615: Linux

Няма оценка

CVSS

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

    Описание

    Оригинално описание

    In the Linux kernel, the following vulnerability has been resolved: usb: gadget: renesas_usb3: validate endpoint index in standard request handlers The GET_STATUS and SET/CLEAR_FEATURE handlers extract the endpoint number from the host-supplied wIndex without any sort of validation. Fix this up by validating the number of endpoints actually match up with the number the device has before attempting to dereference a pointer based on this math. This is just like what was done in commit ee0d382feb44 ("usb: gadget: aspeed_udc: validate endpoint index for ast udc") for the aspeed driver.

    Засегнати продукти

    • Linux Linux: 746bfe63bba37ad55956b7377c9af494e7e28929 преди 7caaf76207f50c77abfd788380e19b2c23a94415; 746bfe63bba37ad55956b7377c9af494e7e28929 преди c4e5ae6db2328d2d9ed55d3005a36c13faab0752; 746bfe63bba37ad55956b7377c9af494e7e28929 преди 360aa6e71870a175a6d86af905be2ca171639eb3; 746bfe63bba37ad55956b7377c9af494e7e28929 преди 1b2bfedccc4fb8c9572e1ea464f905424c91de2a; 746bfe63bba37ad55956b7377c9af494e7e28929 преди adb8014599fdf0818d3d93f1f74e06cd0bdec08d; 746bfe63bba37ad55956b7377c9af494e7e28929 преди 44216e3dd4455b798899b50eedb0ec3831dff8e0; 746bfe63bba37ad55956b7377c9af494e7e28929 преди 37f430b2240655e6b0199a92aa1057e4d621be51; 746bfe63bba37ad55956b7377c9af494e7e28929 преди e3d42598f2995cdc07b7779874e7c5f8a1b773db; 746bfe63bba37ad55956b7377c9af494e7e28929 преди f880aac8a57ebd92abfa685d45424b2998ac1059
    • Linux Linux: 4.5; преди 4.5; 5.10.258 до 5.10.*; 5.15.209 до 5.15.*; 6.1.175 до 6.1.*; 6.6.136 до 6.6.*; 6.12.83 до 6.12.*; 6.18.24 до 6.18.*; 6.19.14 до 6.19.*; 7.0.1 до 7.0.*; от 7.1 нататък

    История

    • 24 април 2026 Публикувано

    Други уязвимости в Linux Linux

    Първоизточници

    CVE-2026-31615: Linux | freedomonline.bg