HID: betop: fix slab-out-of-bounds Write in betop_probe
Summary
GSD-2021-1001512: HID: betop: fix slab-out-of-bounds Write in betop_probe. Affects Kernel versions < 6fc4476dda58f6c00097c7ddec3b772513f57525. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The HID (Human Interface Device) betop is a driver in the Linux Kernel that provides support for the Betop gamepad. The Betop gamepad is a popular input device used for gaming on Linux systems. The driver allows the gamepad to be recognized and used by the operating system. However, a vulnerability has been discovered in the betop driver that could potentially lead to a slab-out-of-bounds write.
Vulnerability Detail
The vulnerability in the betop driver is a slab-out-of-bounds write, which occurs when the driver writes data beyond the bounds of an allocated memory slab. This can result in memory corruption and potentially lead to a privilege escalation or system crash. The vulnerability has not yet been proven to have a significant impact or be exploitable, but it is important to address it to ensure the security and stability of the system.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The HID betop driver in the Linux Kernel has been found to have a slab-out-of-bounds write vulnerability. While the impact and exploitability of this vulnerability have not been proven, it is important to update the Linux Kernel to the latest version that includes the fix to ensure the security and stability of the system. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The betop driver is a component of the Linux Kernel that provides support for the Betop gamepad, allowing it to be recognized and used by the operating system.
A slab-out-of-bounds write is a type of memory corruption vulnerability where data is written beyond the bounds of an allocated memory slab. This can lead to memory corruption and potentially result in privilege escalation or system crashes.
The impact of this vulnerability is not yet proven, but it has the potential to result in memory corruption, privilege escalation, or system crashes.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v4.9.285 or later, which includes the fix for the betop driver.
No specific workaround is mentioned for this vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.