CVE-2024-57993

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
27/02/2025
Last modified:
27/02/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> HID: hid-thrustmaster: Fix warning in thrustmaster_probe by adding endpoint check<br /> <br /> syzbot has found a type mismatch between a USB pipe and the transfer<br /> endpoint, which is triggered by the hid-thrustmaster driver[1].<br /> There is a number of similar, already fixed issues [2].<br /> In this case as in others, implementing check for endpoint type fixes the issue.<br /> <br /> [1] https://syzkaller.appspot.com/bug?extid=040e8b3db6a96908d470<br /> [2] https://syzkaller.appspot.com/bug?extid=348331f63b034f89b622

Impact