HID: betop: fix slab-out-of-bounds Write in betop_probe
Summary
GSD-2021-1001559: HID: betop: fix slab-out-of-bounds Write in betop_probe. Affects Kernel versions < bb8b72374db69afa25a5b65cf1c092860c6fe914. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The HID (Human Interface Device) driver for the betop package in the Linux Kernel is responsible for handling input from betop devices. These devices are typically gamepads or joysticks used for gaming purposes. The driver allows the kernel to communicate with these devices and interpret their input signals. However, a vulnerability has been discovered in the betop_probe function of the driver, which can lead to a slab-out-of-bounds write. This vulnerability can potentially be exploited by an attacker to execute arbitrary code or cause a denial-of-service condition.
Vulnerability Detail
The vulnerability arises due to a slab-out-of-bounds write in the betop_probe function of the HID driver for the betop package. This occurs when the driver attempts to write data beyond the allocated memory region, leading to memory corruption. An attacker can potentially exploit this vulnerability by sending specially crafted input signals to a betop device, triggering the out-of-bounds write and gaining control over the affected system. The impact of this vulnerability can range from arbitrary code execution to a system crash, depending on how it is exploited. The vulnerability has been fixed in Linux Kernel version v4.19.209 by commit bb8b72374db69afa25a5b65cf1c092860c6fe914.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The HID driver for the betop package in the Linux Kernel is vulnerable to a slab-out-of-bounds write, which can be exploited by an attacker to execute arbitrary code or cause a denial-of-service condition. It is recommended to update the Linux Kernel to version v4.19.209 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The betop package is a HID driver in the Linux Kernel that handles input from betop devices, such as gamepads and joysticks.
A slab-out-of-bounds write refers to a situation where a program attempts to write data beyond the allocated memory region, leading to memory corruption.
An attacker can exploit this vulnerability by sending specially crafted input signals to a betop device, triggering the out-of-bounds write and potentially gaining control over the affected system.
The impact of this vulnerability can range from arbitrary code execution to a system crash, depending on how it is exploited.
Yes, this vulnerability has been fixed in Linux Kernel version v4.19.209 by commit bb8b72374db69afa25a5b65cf1c092860c6fe914.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
