HID: betop: Fix Slab-out-of-bounds Write in betop_probe
Summary
GSD-2021-1001641: HID: betop: fix slab-out-of-bounds Write in betop_probe. Affects Kernel versions < dedfc35a2de2bae9fa3da8210a05bfd515f83fee. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The HID (Human Interface Device) betop is a driver in the Linux Kernel that provides support for the Betop gamepad. The Betop gamepad is a popular input device used for gaming on Linux systems. The driver allows the gamepad to be recognized and utilized by the operating system. However, a vulnerability has been discovered in the betop driver that could potentially lead to a slab-out-of-bounds write.
Vulnerability Detail
The vulnerability in the betop driver is caused by a slab-out-of-bounds write in the betop_probe function. This vulnerability could be exploited by an attacker to write beyond the bounds of an allocated slab, potentially leading to memory corruption and arbitrary code execution. The impact and attack plausibility of this vulnerability have not been proven yet, but it is important to address it to prevent any potential security risks.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The HID betop driver in the Linux Kernel has been found to have a slab-out-of-bounds write vulnerability. While the impact and attack plausibility of this vulnerability have not been proven, it is important to address it to mitigate any potential security risks. The vulnerability has been fixed in the Linux Kernel version v5.10.71, and it is recommended to update to the latest version to ensure the security of your system. If you need further support or information on vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The impact of this vulnerability is not yet proven, but it has the potential to lead to memory corruption and arbitrary code execution.
You can use the Vulert Playground at Vulert Scanner to check if your system is affected by this vulnerability. The Vulert Playground allows you to analyze your software without requiring access to the code or installation.
No, there is no specific workaround mentioned for this vulnerability. It is recommended to update the Linux Kernel to the latest version that includes the fix.
You can find more information about this vulnerability in the Open Source Vulnerability Database at https://github.com/cloudsecurityalliance/gsd-database/blob/main/2021/1001xxx/GSD-2021-1001641.json.
For further support on vulnerability remediation, you can contact info@devnack.com. They can provide assistance and guidance in addressing this vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
