In the Linux kernel, the following vulnerability has been resolved:
USB: usbtmc: prevent kernel-usb-infoleak
The syzbot reported a kernel-usb-infoleak in usbtmc_write, we need to clear the structure before filling fields.
[
{
"id": "CVE-2024-47671-3509932a",
"target": {
"file": "drivers/usb/class/usbtmc.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fa652318887da530f2f9dbd9b0ea4a087d05ee12",
"digest": {
"line_hashes": [
"164562033608018208110796060903666983506",
"219159230014852285622686777142612621690",
"216976002817678238296238047650122246213",
"286871514591919847757998033794939228549"
],
"threshold": 0.9
},
"signature_type": "Line"
},
{
"id": "CVE-2024-47671-85f1d6c7",
"target": {
"file": "drivers/usb/class/usbtmc.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@51297ef7ad7824ad577337f273cd092e81a9fa08",
"digest": {
"line_hashes": [
"164562033608018208110796060903666983506",
"219159230014852285622686777142612621690",
"216976002817678238296238047650122246213",
"286871514591919847757998033794939228549"
],
"threshold": 0.9
},
"signature_type": "Line"
},
{
"id": "CVE-2024-47671-86727808",
"target": {
"file": "drivers/usb/class/usbtmc.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0c927dfc0b9bd177f7ab6ee59ef0c4ea06c110a7",
"digest": {
"line_hashes": [
"164562033608018208110796060903666983506",
"219159230014852285622686777142612621690",
"216976002817678238296238047650122246213",
"286871514591919847757998033794939228549"
],
"threshold": 0.9
},
"signature_type": "Line"
},
{
"id": "CVE-2024-47671-b3245d97",
"target": {
"file": "drivers/usb/class/usbtmc.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6c7fc36da021b13c34c572a26ba336cd102418f8",
"digest": {
"line_hashes": [
"164562033608018208110796060903666983506",
"219159230014852285622686777142612621690",
"216976002817678238296238047650122246213",
"286871514591919847757998033794939228549"
],
"threshold": 0.9
},
"signature_type": "Line"
},
{
"id": "CVE-2024-47671-de64aeff",
"target": {
"file": "drivers/usb/class/usbtmc.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@16e0ab9ed3ae7d19ca8ee718ba4e09d5c0f909ca",
"digest": {
"line_hashes": [
"164562033608018208110796060903666983506",
"219159230014852285622686777142612621690",
"216976002817678238296238047650122246213",
"286871514591919847757998033794939228549"
],
"threshold": 0.9
},
"signature_type": "Line"
},
{
"id": "CVE-2024-47671-f298eb7c",
"target": {
"file": "drivers/usb/class/usbtmc.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e872738e670ddd63e19f22d0d784f0bdf26ecba5",
"digest": {
"line_hashes": [
"164562033608018208110796060903666983506",
"219159230014852285622686777142612621690",
"216976002817678238296238047650122246213",
"286871514591919847757998033794939228549"
],
"threshold": 0.9
},
"signature_type": "Line"
},
{
"id": "CVE-2024-47671-feafda61",
"target": {
"file": "drivers/usb/class/usbtmc.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@625fa77151f00c1bd00d34d60d6f2e710b3f9aad",
"digest": {
"line_hashes": [
"164562033608018208110796060903666983506",
"219159230014852285622686777142612621690",
"216976002817678238296238047650122246213",
"286871514591919847757998033794939228549"
],
"threshold": 0.9
},
"signature_type": "Line"
}
]