Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.5
CVE-2024-42236: Linux kernel USB gadget can read/write outside memory
CVE-2024-42236 · published 2 years ago
Summary
The Linux kernel’s USB gadget component could mishandle a zero‑length string from a USB device, causing it to read and write past the intended memory area. This could lead to system instability or allow an attacker to run code. Updating the kernel to the latest version resolves the issue.
What to do
- Update canonical linux-aws-5.4 to version 5.4.0-1132.142~18.04.1.
- Update canonical linux-azure-5.4 to version 5.4.0-1137.144~18.04.1.
- Update canonical linux-gcp-5.4 to version 5.4.0-1136.145~18.04.1.
- Update canonical linux-hwe-5.4 to version 5.4.0-195.215~18.04.1.
- Update canonical linux-ibm-5.4 to version 5.4.0-1079.84~18.04.1.
- Update canonical linux-oracle-5.4 to version 5.4.0-1131.140~18.04.1.
- Update canonical linux-raspi-5.4 to version 5.4.0-1116.128~18.04.1.
- Update canonical linux to version 5.4.0-195.215.
- Update canonical linux-aws to version 5.4.0-1132.142.
- Update canonical linux-aws-5.15 to version 5.15.0-1069.75~20.04.1.
- Update canonical linux-azure to version 5.4.0-1137.144.
- Update canonical linux-azure-5.15 to version 5.15.0-1072.81~20.04.1.
- Update canonical linux-bluefield to version 5.4.0-1092.99.
- Update canonical linux-gcp to version 5.4.0-1136.145.
- Update canonical linux-gcp-5.15 to version 5.15.0-1068.76~20.04.1.
- Update canonical linux-gkeop to version 5.4.0-1099.103.
- Update canonical linux-gkeop-5.15 to version 5.15.0-1052.59~20.04.1.
- Update canonical linux-hwe-5.15 to version 5.15.0-121.131~20.04.1.
- Update canonical linux-ibm to version 5.4.0-1079.84.
- Update canonical linux-ibm-5.15 to version 5.15.0-1062.65~20.04.1.
- Update canonical linux-intel-iotg-5.15 to version 5.15.0-1064.70~20.04.1.
- Update canonical linux-iot to version 5.4.0-1043.44.
- Update canonical linux-kvm to version 5.4.0-1120.128.
- Update canonical linux-lowlatency-hwe-5.15 to version 5.15.0-121.131~20.04.1.
- Update canonical linux-nvidia-tegra-5.15 to version 5.15.0-1030.30~20.04.1.
- Update canonical linux-oracle to version 5.4.0-1131.140.
- Update canonical linux-oracle-5.15 to version 5.15.0-1067.73~20.04.1.
- Update canonical linux-raspi to version 5.4.0-1116.128.
- Update canonical linux-riscv-5.15 to version 5.15.0-1065.69~20.04.1.
- Update canonical linux-xilinx-zynqmp to version 5.4.0-1051.55.
- Update canonical linux-aws-fips to version 5.4.0-1132.142+fips1.
- Update canonical linux-azure-fips to version 5.4.0-1137.144+fips1.
- Update canonical linux-fips to version 5.4.0-1106.116.
- Update canonical linux-gcp-fips to version 5.4.0-1136.145+fips1.
- Update canonical linux to version 5.15.0-121.131.
- Update canonical linux-aws to version 5.15.0-1069.75.
- Update canonical linux-aws-6.8 to version 6.8.0-1018.19~22.04.1.
- Update canonical linux-azure to version 5.15.0-1072.81.
- Update canonical linux-azure-6.8 to version 6.8.0-1017.20~22.04.1.
- Update canonical linux-azure-fde to version 5.15.0-1072.81.1.
- Update canonical linux-gcp to version 5.15.0-1068.76.
- Update canonical linux-gcp-6.8 to version 6.8.0-1017.19~22.04.1.
- Update canonical linux-gke to version 5.15.0-1066.72.
- Update canonical linux-gkeop to version 5.15.0-1052.59.
- Update canonical linux-hwe-6.8 to version 6.8.0-48.48~22.04.1.
- Update canonical linux-ibm to version 5.15.0-1062.65.
- Update canonical linux-ibm-6.8 to version 6.8.0-1015.15~22.04.1.
- Update canonical linux-intel-iotg to version 5.15.0-1064.70.
- Update canonical linux-kvm to version 5.15.0-1066.71.
- Update canonical linux-lowlatency to version 5.15.0-121.131.
- Update canonical linux-lowlatency-hwe-6.8 to version 6.8.0-48.48.3~22.04.1.
- Update canonical linux-nvidia to version 5.15.0-1064.65.
- Update canonical linux-nvidia-6.8 to version 6.8.0-1017.19~22.04.1.
- Update canonical linux-nvidia-tegra to version 5.15.0-1028.28.
- Update canonical linux-nvidia-tegra-igx to version 5.15.0-1016.16.
- Update canonical linux-oracle to version 5.15.0-1067.73.
- Update canonical linux-oracle-6.8 to version 6.8.0-1015.15~22.04.1.
- Update canonical linux-raspi to version 5.15.0-1062.65.
- Update canonical linux-riscv-6.8 to version 6.8.0-48.48.1~22.04.2.
- Update canonical linux-xilinx-zynqmp to version 5.15.0-1035.39.
- Update canonical linux-bluefield to version 5.15.0-1052.54.
- Update canonical linux-aws-fips to version 5.15.0-1069.75+fips1.
- Update canonical linux-azure-fips to version 5.15.0-1072.81+fips1.
- Update canonical linux-fips to version 5.15.0-121.131+fips1.
- Update canonical linux-gcp-fips to version 5.15.0-1068.76+fips1.
- Update canonical linux-intel-iot-realtime to version 5.15.0-1063.65.
- Update canonical linux-realtime to version 5.15.0-1070.78.
- Update canonical linux-realtime-6.8 to version 6.8.1-1011.11~22.04.1.
- Update canonical linux to version 6.8.0-48.48.
- Update canonical linux-aws to version 6.8.0-1018.20.
- Update canonical linux-azure to version 6.8.0-1017.20.
- Update canonical linux-gcp to version 6.8.0-1017.19.
- Update canonical linux-gke to version 6.8.0-1013.17.
- Update canonical linux-gkeop to version 6.8.0-1002.4.
- Update canonical linux-ibm to version 6.8.0-1015.15.
- Update canonical linux-lowlatency to version 6.8.0-48.48.3.
- Update canonical linux-nvidia to version 6.8.0-1017.19.
- Update canonical linux-nvidia-lowlatency to version 6.8.0-1017.19.1.
- Update canonical linux-oem-6.8 to version 6.8.0-1016.16.
- Update canonical linux-oracle to version 6.8.0-1015.16.
- Update canonical linux-raspi to version 6.8.0-1014.16.
- Update canonical linux-riscv to version 6.8.0-48.48.1.
- Update canonical linux-xilinx to version 6.8.0-1009.10.
- Update canonical linux-fips to version 6.8.0-78.78+fips1.
- Update canonical linux-raspi-realtime to version 6.8.0-2013.14.
- Update canonical linux-realtime to version 6.8.1-1011.11.
- Update debian linux to version 6.1.106-1.
- Update debian linux to version 6.9.10-1.
- Update linux kernel to version 6.9.10.
- Update linux linux to version a444c3fc264119801575ab086e03fb4952f23fd0 or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| – | linux | linux_kernel |
< 4.19.318 >= 4.20, < 5.4.280 >= 5.5, < 5.10.222 >= 5.11, < 5.15.163 >= 5.16, < 6.1.100 >= 6.2, < 6.6.41 >= 6.7, < 6.9.10 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| – | linux | linux |
< a444c3fc264119801575ab086e03fb4952f23fd0 3.10 |
| Ubuntu:Pro:14.04:LTS | canonical | linux | All versions |
| Ubuntu:Pro:14.04:LTS | canonical | linux-aws | All versions |
| Ubuntu:Pro:14.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:Pro:14.04:LTS | canonical | linux-lts-xenial | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-aws-hwe | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-kvm | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-oracle | All versions |
| Ubuntu:Pro:FIPS:16.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-aws-5.4 |
< 5.4.0-1132.142~18.04.1 Fix: upgrade to 5.4.0-1132.142~18.04.1
|
| Ubuntu:Pro:18.04:LTS | canonical | linux-azure-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-azure-5.4 |
< 5.4.0-1137.144~18.04.1 Fix: upgrade to 5.4.0-1137.144~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-gcp-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-gcp-5.4 |
< 5.4.0-1136.145~18.04.1 Fix: upgrade to 5.4.0-1136.145~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-hwe-5.4 |
< 5.4.0-195.215~18.04.1 Fix: upgrade to 5.4.0-195.215~18.04.1
|
| Ubuntu:Pro:18.04:LTS | canonical | linux-ibm-5.4 |
< 5.4.0-1079.84~18.04.1 Fix: upgrade to 5.4.0-1079.84~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-oracle-5.4 |
< 5.4.0-1131.140~18.04.1 Fix: upgrade to 5.4.0-1131.140~18.04.1
|
| Ubuntu:Pro:18.04:LTS | canonical | linux-raspi-5.4 |
< 5.4.0-1116.128~18.04.1 Fix: upgrade to 5.4.0-1116.128~18.04.1
|
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:20.04:LTS | canonical | linux |
< 5.4.0-195.215 Fix: upgrade to 5.4.0-195.215
|
| Ubuntu:20.04:LTS | canonical | linux-aws |
< 5.4.0-1132.142 Fix: upgrade to 5.4.0-1132.142
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.15 |
< 5.15.0-1069.75~20.04.1 Fix: upgrade to 5.15.0-1069.75~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-azure |
< 5.4.0-1137.144 Fix: upgrade to 5.4.0-1137.144
|
| Ubuntu:20.04:LTS | canonical | linux-azure-5.15 |
< 5.15.0-1072.81~20.04.1 Fix: upgrade to 5.15.0-1072.81~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-bluefield |
< 5.4.0-1092.99 Fix: upgrade to 5.4.0-1092.99
|
| Ubuntu:20.04:LTS | canonical | linux-gcp |
< 5.4.0-1136.145 Fix: upgrade to 5.4.0-1136.145
|
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.15 |
< 5.15.0-1068.76~20.04.1 Fix: upgrade to 5.15.0-1068.76~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-gkeop |
< 5.4.0-1099.103 Fix: upgrade to 5.4.0-1099.103
|
| Ubuntu:20.04:LTS | canonical | linux-gkeop-5.15 |
< 5.15.0-1052.59~20.04.1 Fix: upgrade to 5.15.0-1052.59~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.15 |
< 5.15.0-121.131~20.04.1 Fix: upgrade to 5.15.0-121.131~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-ibm |
< 5.4.0-1079.84 Fix: upgrade to 5.4.0-1079.84
|
| Ubuntu:20.04:LTS | canonical | linux-ibm-5.15 |
< 5.15.0-1062.65~20.04.1 Fix: upgrade to 5.15.0-1062.65~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-intel-iotg-5.15 |
< 5.15.0-1064.70~20.04.1 Fix: upgrade to 5.15.0-1064.70~20.04.1
|
Showing 50 of 176. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:20.04:LTS | canonical | linux-iot |
< 5.4.0-1043.44 Fix: upgrade to 5.4.0-1043.44
|
| Ubuntu:20.04:LTS | canonical | linux-kvm |
< 5.4.0-1120.128 Fix: upgrade to 5.4.0-1120.128
|
| Ubuntu:20.04:LTS | canonical | linux-lowlatency-hwe-5.15 |
< 5.15.0-121.131~20.04.1 Fix: upgrade to 5.15.0-121.131~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-nvidia-tegra-5.15 |
< 5.15.0-1030.30~20.04.1 Fix: upgrade to 5.15.0-1030.30~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-oracle |
< 5.4.0-1131.140 Fix: upgrade to 5.4.0-1131.140
|
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.15 |
< 5.15.0-1067.73~20.04.1 Fix: upgrade to 5.15.0-1067.73~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-raspi |
< 5.4.0-1116.128 Fix: upgrade to 5.4.0-1116.128
|
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.15 |
< 5.15.0-1065.69~20.04.1 Fix: upgrade to 5.15.0-1065.69~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-xilinx-zynqmp |
< 5.4.0-1051.55 Fix: upgrade to 5.4.0-1051.55
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-aws-fips |
< 5.4.0-1132.142+fips1 Fix: upgrade to 5.4.0-1132.142+fips1
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-azure-fips |
< 5.4.0-1137.144+fips1 Fix: upgrade to 5.4.0-1137.144+fips1
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-fips |
< 5.4.0-1106.116 Fix: upgrade to 5.4.0-1106.116
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-gcp-fips |
< 5.4.0-1136.145+fips1 Fix: upgrade to 5.4.0-1136.145+fips1
|
| Ubuntu:22.04:LTS | canonical | linux |
< 5.15.0-121.131 Fix: upgrade to 5.15.0-121.131
|
| Ubuntu:22.04:LTS | canonical | linux-allwinner-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws |
< 5.15.0-1069.75 Fix: upgrade to 5.15.0-1069.75
|
| Ubuntu:22.04:LTS | canonical | linux-aws-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.8 |
< 6.8.0-1018.19~22.04.1 Fix: upgrade to 6.8.0-1018.19~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure |
< 5.15.0-1072.81 Fix: upgrade to 5.15.0-1072.81
|
| Ubuntu:22.04:LTS | canonical | linux-azure-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.8 |
< 6.8.0-1017.20~22.04.1 Fix: upgrade to 6.8.0-1017.20~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure-fde |
< 5.15.0-1072.81.1 Fix: upgrade to 5.15.0-1072.81.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp |
< 5.15.0-1068.76 Fix: upgrade to 5.15.0-1068.76
|
| Ubuntu:22.04:LTS | canonical | linux-gcp-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.8 |
< 6.8.0-1017.19~22.04.1 Fix: upgrade to 6.8.0-1017.19~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-gke |
< 5.15.0-1066.72 Fix: upgrade to 5.15.0-1066.72
|
| Ubuntu:22.04:LTS | canonical | linux-gkeop |
< 5.15.0-1052.59 Fix: upgrade to 5.15.0-1052.59
|
| Ubuntu:22.04:LTS | canonical | linux-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.8 |
< 6.8.0-48.48~22.04.1 Fix: upgrade to 6.8.0-48.48~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-ibm |
< 5.15.0-1062.65 Fix: upgrade to 5.15.0-1062.65
|
| Ubuntu:22.04:LTS | canonical | linux-ibm-6.8 |
< 6.8.0-1015.15~22.04.1 Fix: upgrade to 6.8.0-1015.15~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-intel-iotg |
< 5.15.0-1064.70 Fix: upgrade to 5.15.0-1064.70
|
| Ubuntu:22.04:LTS | canonical | linux-kvm |
< 5.15.0-1066.71 Fix: upgrade to 5.15.0-1066.71
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency |
< 5.15.0-121.131 Fix: upgrade to 5.15.0-121.131
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.8 |
< 6.8.0-48.48.3~22.04.1 Fix: upgrade to 6.8.0-48.48.3~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia |
< 5.15.0-1064.65 Fix: upgrade to 5.15.0-1064.65
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.8 |
< 6.8.0-1017.19~22.04.1 Fix: upgrade to 6.8.0-1017.19~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra |
< 5.15.0-1028.28 Fix: upgrade to 5.15.0-1028.28
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra-igx |
< 5.15.0-1016.16 Fix: upgrade to 5.15.0-1016.16
|
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.0 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.1 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle |
< 5.15.0-1067.73 Fix: upgrade to 5.15.0-1067.73
|
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.8 |
< 6.8.0-1015.15~22.04.1 Fix: upgrade to 6.8.0-1015.15~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-raspi |
< 5.15.0-1062.65 Fix: upgrade to 5.15.0-1062.65
|
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.8 |
< 6.8.0-48.48.1~22.04.2 Fix: upgrade to 6.8.0-48.48.1~22.04.2
|
| Ubuntu:22.04:LTS | canonical | linux-starfive-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-xilinx-zynqmp |
< 5.15.0-1035.39 Fix: upgrade to 5.15.0-1035.39
|
| Ubuntu:Nvidia-BlueField:22.04:LTS | canonical | linux-bluefield |
< 5.15.0-1052.54 Fix: upgrade to 5.15.0-1052.54
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-aws-fips |
< 5.15.0-1069.75+fips1 Fix: upgrade to 5.15.0-1069.75+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-azure-fips |
< 5.15.0-1072.81+fips1 Fix: upgrade to 5.15.0-1072.81+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-fips |
< 5.15.0-121.131+fips1 Fix: upgrade to 5.15.0-121.131+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-gcp-fips |
< 5.15.0-1068.76+fips1 Fix: upgrade to 5.15.0-1068.76+fips1
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-intel-iot-realtime |
< 5.15.0-1063.65 Fix: upgrade to 5.15.0-1063.65
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime |
< 5.15.0-1070.78 Fix: upgrade to 5.15.0-1070.78
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime-6.8 |
< 6.8.1-1011.11~22.04.1 Fix: upgrade to 6.8.1-1011.11~22.04.1
|
| Ubuntu:24.04:LTS | canonical | linux |
< 6.8.0-48.48 Fix: upgrade to 6.8.0-48.48
|
| Ubuntu:24.04:LTS | canonical | linux-aws |
< 6.8.0-1018.20 Fix: upgrade to 6.8.0-1018.20
|
| Ubuntu:24.04:LTS | canonical | linux-azure |
< 6.8.0-1017.20 Fix: upgrade to 6.8.0-1017.20
|
| Ubuntu:24.04:LTS | canonical | linux-gcp |
< 6.8.0-1017.19 Fix: upgrade to 6.8.0-1017.19
|
| Ubuntu:24.04:LTS | canonical | linux-gke |
< 6.8.0-1013.17 Fix: upgrade to 6.8.0-1013.17
|
| Ubuntu:24.04:LTS | canonical | linux-gkeop |
< 6.8.0-1002.4 Fix: upgrade to 6.8.0-1002.4
|
| Ubuntu:24.04:LTS | canonical | linux-ibm |
< 6.8.0-1015.15 Fix: upgrade to 6.8.0-1015.15
|
| Ubuntu:24.04:LTS | canonical | linux-lowlatency |
< 6.8.0-48.48.3 Fix: upgrade to 6.8.0-48.48.3
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia |
< 6.8.0-1017.19 Fix: upgrade to 6.8.0-1017.19
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia-lowlatency |
< 6.8.0-1017.19.1 Fix: upgrade to 6.8.0-1017.19.1
|
| Ubuntu:24.04:LTS | canonical | linux-oem-6.8 |
< 6.8.0-1016.16 Fix: upgrade to 6.8.0-1016.16
|
| Ubuntu:24.04:LTS | canonical | linux-oracle |
< 6.8.0-1015.16 Fix: upgrade to 6.8.0-1015.16
|
| Ubuntu:24.04:LTS | canonical | linux-raspi |
< 6.8.0-1014.16 Fix: upgrade to 6.8.0-1014.16
|
| Ubuntu:24.04:LTS | canonical | linux-riscv |
< 6.8.0-48.48.1 Fix: upgrade to 6.8.0-48.48.1
|
| Ubuntu:24.04:LTS | canonical | linux-xilinx |
< 6.8.0-1009.10 Fix: upgrade to 6.8.0-1009.10
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-fips |
< 6.8.0-78.78+fips1 Fix: upgrade to 6.8.0-78.78+fips1
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-raspi-realtime |
< 6.8.0-2013.14 Fix: upgrade to 6.8.0-2013.14
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime |
< 6.8.1-1011.11 Fix: upgrade to 6.8.1-1011.11
|
| Debian:12 | debian | linux |
< 6.1.106-1 Fix: upgrade to 6.1.106-1
|
| Debian:13 | debian | linux |
< 6.9.10-1 Fix: upgrade to 6.9.10-1
|
| Linux | linux | kernel |
>= 6.7.0, < 6.9.10 Fix: upgrade to 6.9.10
|
Original advisory text
usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: configfs: Prevent OOB read/write in usb_string_copy() Userspace provided string 's' could trivially have the length zero. Left unchecked this will firstly result in an OOB read in the form `if (str[0 - 1] == '\n') followed closely by an OOB write in the form `str[0 - 1] = '\0'`. There is already a validating check to catch strings that are too long. Let's supply an additional check for invalid strings that are too short.
References
- https://git.kernel.org/stable/c/72b8ee0d9826e8ed00e0bdfce3e46b98419b37ce Third Party Advisory
- https://git.kernel.org/stable/c/2d16f63d8030903e5031853e79d731ee5d474e70 Third Party Advisory
- https://ubuntu.com/security/notices/USN-7007-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7009-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7003-4 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7003-5 Vendor Advisory
- https://security-tracker.debian.org/tracker/CVE-2024-42236 Vendor Advisory
- https://ubuntu.com/security/CVE-2024-42236 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2024-42236 Third Party Advisory
- https://git.kernel.org/linus/6d3c721e686ea6c59e18289b400cc95c76e927e0 Third Party Advisory
- https://git.kernel.org/stable/c/a444c3fc264119801575ab086e03fb4952f23fd0 Third Party Advisory
- https://ubuntu.com/security/notices/USN-7003-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7003-2 Vendor Advisory
- https://git.kernel.org/stable/c/c95fbdde87e39e5e0ae27f28bf6711edfb985caa Third Party Advisory
- https://git.kernel.org/stable/c/d1205033e912f9332c1dbefa812e6ceb0575ce0a Third Party Advisory
- https://git.kernel.org/stable/c/6d3c721e686ea6c59e18289b400cc95c76e927e0 Third Party Advisory
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/42xxx/CVE-2024-42236... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-42236 Vendor Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Product
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html URL
- https://git.kernel.org/stable/c/e8474a10c535e6a2024c3b06e37e4a3a23beb490 Third Party Advisory
- https://git.kernel.org/stable/c/eecfefad0953b2f31aaefa058f7f348ff39c4bba Third Party Advisory
- https://ubuntu.com/security/notices/USN-7156-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7006-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7003-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7007-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7009-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7019-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7007-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7089-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7090-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7089-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7089-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7095-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7089-4 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7089-5 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7089-6 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7089-7 Vendor Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Type
CWE-787Out-of-bounds Write
Timeline
Published7 Aug 2024
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2024-42236 · NVD
CVE-2024-42236 · MITRE
UBUNTU-CVE-2024-42236 · OSV
DEBIAN-CVE-2024-42236 · OSV
CVE-2024-42236 · OSV
Track software like this
Free during beta