Riskcovery

CVE-2024-57993

HID: hid-thrustmaster: Fix warning in thrustmaster_probe by adding endpoint check

State
Published
Severity
Not scored
Published
Feb 27, 2025
Updated
Oct 15, 2026
Reserved
Feb 27, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

HID: hid-thrustmaster: Fix warning in thrustmaster_probe by adding endpoint check

syzbot has found a type mismatch between a USB pipe and the transfer endpoint, which is triggered by the hid-thrustmaster driver[1]. There is a number of similar, already fixed issues [2]. In this case as in others, implementing check for endpoint type fixes the issue.

[1] https://syzkaller.appspot.com/bug?extid=040e8b3db6a96908d470 [2] https://syzkaller.appspot.com/bug?extid=348331f63b034f89b622

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • c49c33637802a2c6957a78119eb8be3b055dd9e9 to before 220883fba32549a34f0734e4859d07f4dcd56992Affected
  • c49c33637802a2c6957a78119eb8be3b055dd9e9 to before ae730deded66150204c494282969bfa98dc3ae67Affected
  • c49c33637802a2c6957a78119eb8be3b055dd9e9 to before e5bcae4212a6a4b4204f46a1b8bcba08909d2007Affected
  • c49c33637802a2c6957a78119eb8be3b055dd9e9 to before 816e84602900f7f951458d743fa12769635ebfd5Affected
  • c49c33637802a2c6957a78119eb8be3b055dd9e9 to before 50420d7c79c37a3efe4010ff9b1bb14bc61ebccfAffected
LinuxLinux
  • 5.13Affected
  • before 5.13Not affected
  • 6.1.129 through 6.1.*Not affected
  • 6.6.76 through 6.6.*Not affected
  • 6.12.13 through 6.12.*Not affected
  • 6.13.2 through 6.13.*Not affected
  • 6.14 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.