HID: betop: Fix Slab-out-of-bounds Write in betop_probe
Summary
UVI-2021-1001531: HID: betop: fix slab-out-of-bounds Write in betop_probe. Affects Kernel versions < 1c83c38dec83d57bc18d0c01d82c413d3b34ccb9. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The HID (Human Interface Device) betop is a driver in the Linux Kernel that provides support for the Betop gamepad. This driver allows the Betop gamepad to be recognized and used by the Linux operating system. The Betop gamepad is a popular gaming controller used by many gamers. However, a vulnerability has been discovered in the betop driver that could potentially be exploited by an attacker.
Vulnerability Detail
The vulnerability in the betop driver is a slab-out-of-bounds write issue. This type of vulnerability occurs when a program writes data beyond the allocated memory, potentially leading to memory corruption and arbitrary code execution. In the case of the betop driver, this vulnerability can be triggered during the probe process. An attacker could exploit this vulnerability by sending specially crafted input to the driver, causing it to write data outside the bounds of the allocated memory. This could potentially lead to a system crash or allow the attacker to execute arbitrary code with kernel privileges.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The HID betop driver in the Linux Kernel has been found to have a slab-out-of-bounds write vulnerability. This vulnerability can potentially lead to a system crash or allow an attacker to execute arbitrary code with kernel privileges. It is recommended to update the Linux Kernel to the latest version that includes the fix for this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability could potentially lead to a system crash or allow an attacker to execute arbitrary code with kernel privileges.
You can use the Vulert Playground at Vulert Scanner to check if your system is affected by this vulnerability. Simply upload your package-lock.json file and Vulert will analyze it for any open-source vulnerabilities, including this one.
There is no known exploit for this vulnerability at the moment. However, it is always recommended to apply security patches and updates to mitigate the risk of potential exploits.
In addition to updating the Linux Kernel to the latest version, it is also recommended to follow general security best practices such as using a firewall, practicing least privilege, and regularly updating all software components on the system.
You can find more information about this vulnerability in the Open Source Vulnerability Database (OSVDB) entry at https://github.com/cloudsecurityalliance/gsd-database/blob/main/2021/1001xxx/UVI-2021-1001531.json
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
