PT-2024-9083 · Linux+5 · Linux Kernel+5
Syzbot
·
Published
2024-04-30
·
Updated
2025-02-03
·
CVE-2024-38565
CVSS v3.1
6.5
Medium
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions:
Linux kernel (affected versions not specified)
Description:
The issue is related to the wifi component ar5523 in the Linux kernel. It involves errors in resource management within the
ar5523 probe() function. Exploitation of this issue could lead to a denial of service. The problem arises when an endpoint in use does not have the expected type, as reported by Syzkaller. The fix involves checking for the existence of all proper endpoints with their respective types intact. However, the patch has not been tested on real hardware. Technical details include the ar5523 cmd() and ar5523 probe() functions, and the usb submit urb() function where the warning occurs.Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu