CVE-2024-35825 — Linux vulnerability
32 documents7 sources
Severity
5.5MEDIUMNVD
OSV7.0
EPSS
0.0%
top 93.64%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMay 17
Latest updateSep 18
Description
In the Linux kernel, the following vulnerability has been resolved:
usb: gadget: ncm: Fix handling of zero block length packets
While connecting to a Linux host with CDC_NCM_NTB_DEF_SIZE_TX
set to 65536, it has been observed that we receive short packets,
which come at interval of 5-10 seconds sometimes and have block
length zero but still contain 1-2 valid datagrams present.
According to the NCM spec:
"If wBlockLength = 0x0000, the block is terminated by a
short packet. In this case, the US…
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6
Affected Packages5 packages
▶CVEListV5linux/linuxff3ba016263ee93a1c6209bf5ab1599de7ab1512 — e2dbfea520e60d58e0c498ba41bde10452257779+10
Also affects: Debian Linux 10.0
Patches
🔴Vulnerability Details
15📋Vendor Advisories
15💬Community
1Bugzilla
▶