HID: betop: fix slab-out-of-bounds Write in betop_probe
Summary
GSD-2021-1001588: HID: betop: fix slab-out-of-bounds Write in betop_probe. Affects Kernel versions < fe9bb925e7096509711660d39c0493a1546e9550. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The HID (Human Interface Device) betop is a package in the Linux Kernel ecosystem. It provides support for the Betop gamepad. The Betop gamepad is a popular input device used for gaming on Linux systems. This package allows users to connect and use the Betop gamepad with their Linux machines.
Vulnerability Detail
The vulnerability identified in the HID betop package is a slab-out-of-bounds write issue in the betop_probe function. This vulnerability could potentially be exploited by an attacker to write beyond the allocated memory, leading to memory corruption and possible arbitrary code execution. The impact and attack plausibility of this vulnerability have not been proven yet. The vulnerability has been fixed in the Linux Kernel version v5.4.151 by commit fe9bb925e7096509711660d39c0493a1546e9550.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The HID betop package in the Linux Kernel was found to have a slab-out-of-bounds write vulnerability. This vulnerability has been fixed in the latest version of the Linux Kernel. It is recommended to update the kernel to ensure the fix is applied. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The HID betop package is a component of the Linux Kernel ecosystem that provides support for the Betop gamepad, allowing users to connect and use the gamepad with their Linux machines.
A slab-out-of-bounds write vulnerability occurs when a program writes data beyond the allocated memory region, potentially leading to memory corruption and other security issues.
The impact of this vulnerability is not yet proven. However, if successfully exploited, it could lead to memory corruption and possible arbitrary code execution.
Yes, this vulnerability has been fixed in the Linux Kernel version v5.4.151 by commit fe9bb925e7096509711660d39c0493a1546e9550.
To fix this vulnerability, update the Linux Kernel to version v5.4.151 or later by pulling the latest updates from the official Linux Kernel repository.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
