PT-2024-9310 · Linux+5 · Linux Kernel+5
Published
2024-06-04
·
Updated
2025-02-03
·
CVE-2024-39509
CVSS v3.1
5.5
Medium
| AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel versions prior to 6.9.0-rc7-syzkaller-00183-gcf87f46fd34d
Description:
The issue is related to the HID core in the Linux kernel, where a warning is triggered when trying to write a value into a field of smaller size in an output report. The
implement() function already has a warning message printed with the help of hid warn(), and the value in question gets trimmed. The WARN ON may be considered superfluous and can be removed to suppress future syzkaller triggers.Recommendations:
To resolve the issue, update the Linux kernel to a version that includes the fix for the HID core vulnerability.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Assertion Failure
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Astra Linux
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu