HID: usbhid: fix info leak in hid_submit_ctrl
Summary
GSD-2021-1001048: HID: usbhid: fix info leak in hid_submit_ctrl. Affects Kernel versions < 21883bff0fd854e07429a773ff18f1e9658f50e8. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The HID (Human Interface Device) subsystem in the Linux Kernel is responsible for handling input devices such as keyboards, mice, and game controllers. The usbhid module is a part of this subsystem and provides support for USB HID devices. It allows communication between the kernel and USB HID devices, enabling the transfer of data and control commands. However, a vulnerability has been discovered in the hid_submit_ctrl function of the usbhid module, which could lead to an information leak.
Vulnerability Detail
The vulnerability in the hid_submit_ctrl function of the usbhid module allows an attacker to leak sensitive information. When a control transfer request is submitted to the HID device, the function fails to properly initialize the buffer used for transferring data. This can result in uninitialized memory being sent to the device, potentially exposing sensitive information from the kernel memory. An attacker with physical access to the system or the ability to send specially crafted USB packets could exploit this vulnerability to obtain sensitive data, such as encryption keys or passwords. It is important to note that the impact and attack plausibility of this vulnerability have not been proven.
How To Fix
No fixed version is published for this vulnerability.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v5.12.12 or later. The fix for this issue has been implemented in commit 21883bff0fd854e07429a773ff18f1e9658f50e8 of the Linux Kernel source code. Updating to the latest version of the Kernel will ensure that the vulnerable code is replaced with the patched version.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is recommended to apply the fix by updating the Linux Kernel as mentioned in the 'how_to_fix' section.
Conclusion
The vulnerability in the hid_submit_ctrl function of the usbhid module can lead to an information leak, potentially exposing sensitive data from the kernel memory. To mitigate this vulnerability, it is recommended to update the Linux Kernel to version v5.12.12 or later. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The HID (Human Interface Device) subsystem in the Linux Kernel is responsible for handling input devices such as keyboards, mice, and game controllers. It provides support for communication between the kernel and USB HID devices.
The usbhid module is a part of the HID subsystem in the Linux Kernel. It enables communication between the kernel and USB HID devices, allowing the transfer of data and control commands.
The hid_submit_ctrl function is a function within the usbhid module that is responsible for submitting control transfer requests to HID devices. It is used for transferring data and control commands between the kernel and the device.
An information leak vulnerability refers to a security flaw that allows an attacker to gain access to sensitive information that they should not have access to. In this case, the vulnerability in hid_submit_ctrl could potentially expose sensitive data from the kernel memory.
An attacker with physical access to the system or the ability to send specially crafted USB packets could exploit this vulnerability. By leveraging the uninitialized memory in the hid_submit_ctrl function, they could obtain sensitive information from the kernel memory.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Follow Vulert in Google
Get more Vulert vulnerability and dependency-security updates in Google Search and AI results.