CVE-2024-47671

USB: usbtmc: prevent kernel-usb-infoleak

MEDIUM

5.5

CVSS Score

Published: October 9, 2024 at 02:49 PM UTC

Updated: June 17, 2026 at 07:57 AM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.5

Exploit prediction

EPSS 0.2%

SSVC

No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: USB: usbtmc: prevent kernel-usb-infoleak The syzbot reported a kernel-usb-infoleak in usbtmc_write, we need to clear the structure before filling fields.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

4.20 ≤ v < 5.10.2274.20 ≤ v < 5.15.1684.20 ≤ v < 5.4.2854.20 ≤ v < 6.1.1124.20 ≤ v < 6.10.124.20 ≤ v < 6.11.14.20 ≤ v < 6.124.20 ≤ v < 6.6.536.2 ≤ v < 6.6.536.7 ≤ v < 6.10.124ddc645f40e90fa3bc7af3a3f3bd7d29e671a7756.11 rc1 6.11 rc2 6.11 rc3 6.11 rc4 6.11 rc5 6.11 rc6 6.11 rc7 6.11 rc8 6.11.1

Vendor states this is fixed in 0c927dfc0b9bd177f7ab6ee59ef0c4ea06c110a7 (fixed)

Vendor states this is fixed in 16e0ab9ed3ae7d19ca8ee718ba4e09d5c0f909ca (fixed)

Vendor states this is fixed in 51297ef7ad7824ad577337f273cd092e81a9fa08 (fixed)

Vendor states this is fixed in 625fa77151f00c1bd00d34d60d6f2e710b3f9aad (fixed)

Vendor states this is fixed in 6c7fc36da021b13c34c572a26ba336cd102418f8 (fixed)

Vendor states this is fixed in ba6269e187aa1b1f20faf3c458831a0d6350304b (fixed)

Vendor states this is fixed in e872738e670ddd63e19f22d0d784f0bdf26ecba5 (fixed)

Vendor states this is fixed in fa652318887da530f2f9dbd9b0ea4a087d05ee12 (fixed)

Vendor states this is fixed in 4.20 (unaffected)

Vendor states this is fixed in 5.10.227 (unaffected)

Vendor states this is fixed in 5.15.168 (unaffected)

Vendor states this is fixed in 5.4.285 (unaffected)