In the Linux kernel, the following vulnerability has been resolved:
HID: hid-thrustmaster: Fix warning in thrustmaster_probe by adding endpoint check
syzbot has found a type mismatch between a USB pipe and the transfer endpoint, which is triggered by the hid-thrustmaster driver[1]. There is a number of similar, already fixed issues [2]. In this case as in others, implementing check for endpoint type fixes the issue.
[1] https://syzkaller.appspot.com/bug?extid=040e8b3db6a96908d470 [2] https://syzkaller.appspot.com/bug?extid=348331f63b034f89b622
[
{
"id": "CVE-2024-57993-0f7e683e",
"signature_version": "v1",
"digest": {
"length": 910.0,
"function_hash": "145146604852807876862880780701032871640"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@220883fba32549a34f0734e4859d07f4dcd56992",
"target": {
"file": "drivers/hid/hid-thrustmaster.c",
"function": "thrustmaster_interrupts"
}
},
{
"id": "CVE-2024-57993-378e5dcc",
"signature_version": "v1",
"digest": {
"length": 910.0,
"function_hash": "145146604852807876862880780701032871640"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e5bcae4212a6a4b4204f46a1b8bcba08909d2007",
"target": {
"file": "drivers/hid/hid-thrustmaster.c",
"function": "thrustmaster_interrupts"
}
},
{
"id": "CVE-2024-57993-489855bf",
"signature_version": "v1",
"digest": {
"length": 910.0,
"function_hash": "145146604852807876862880780701032871640"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@816e84602900f7f951458d743fa12769635ebfd5",
"target": {
"file": "drivers/hid/hid-thrustmaster.c",
"function": "thrustmaster_interrupts"
}
},
{
"id": "CVE-2024-57993-82c23564",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"37000268547017870100139240949912827169",
"306214637950714896215962304849637559334",
"95319436662117304353832274046409327612"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ae730deded66150204c494282969bfa98dc3ae67",
"target": {
"file": "drivers/hid/hid-thrustmaster.c"
}
},
{
"id": "CVE-2024-57993-9cda3ce1",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"37000268547017870100139240949912827169",
"306214637950714896215962304849637559334",
"95319436662117304353832274046409327612"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e5bcae4212a6a4b4204f46a1b8bcba08909d2007",
"target": {
"file": "drivers/hid/hid-thrustmaster.c"
}
},
{
"id": "CVE-2024-57993-a5d8eb4e",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"37000268547017870100139240949912827169",
"306214637950714896215962304849637559334",
"95319436662117304353832274046409327612"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@816e84602900f7f951458d743fa12769635ebfd5",
"target": {
"file": "drivers/hid/hid-thrustmaster.c"
}
},
{
"id": "CVE-2024-57993-dc1d3cea",
"signature_version": "v1",
"digest": {
"length": 910.0,
"function_hash": "145146604852807876862880780701032871640"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ae730deded66150204c494282969bfa98dc3ae67",
"target": {
"file": "drivers/hid/hid-thrustmaster.c",
"function": "thrustmaster_interrupts"
}
},
{
"id": "CVE-2024-57993-f5d4d829",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"37000268547017870100139240949912827169",
"306214637950714896215962304849637559334",
"95319436662117304353832274046409327612"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@220883fba32549a34f0734e4859d07f4dcd56992",
"target": {
"file": "drivers/hid/hid-thrustmaster.c"
}
}
]