Description
Certain USB drivers in the Linux 2.4 kernel use the copy_to_user function on uninitialized structures, which could allow local users to obtain sensitive information by reading memory that was not cleared from previous usage.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 3.0 | kernel-image-sparc-2.4 | 26woody1 | DSA-1070-1 |
| Debian 3.0 | kernel-patch-2.4.19-mips | 2.4.19-0.020911.1.woody5 | DSA-1070-1 |
| Debian 3.0 | kernel-source-2.4.16 | 2.4.16-1woody2 | DSA-1067-1 |
| Debian 3.0 | kernel-source-2.4.17 | 2.4.17-1woody4 | DSA-1082-1 |
| Debian 3.0 | kernel-source-2.4.18 | 2.4.18-14.4 | DSA-1069-1 |
| Debian 3.0 | kernel-source-2.4.19 | 2.4.19-4.woody3 | DSA-1070-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 3 | kernel +8 | 2.4.21-20.0.1.EL | RHSA-2004:549 |
Advisories 5
- RHSA-2004:549 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- DSA-1082-1 kernel-source-2.4.17 - several vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-1067-1 kernel-source-2.4.16 - several Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-1069-1 kernel-source-2.4.18 - several Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-1070-1 kernel-source-2.4.19 - several vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
References
- 20163 third-party-advisory
- VU#981134 third-party-advisory
- linux-usb-gain-privileges(16931) vdb-entry
- http://www.securityspace.com/smysecure/catid.html?id=14580
- DSA-1082 vendor-advisory
- 10892 vdb-entry
- FLSA:2336 vendor-advisory
- http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=127921
- GLSA-200408-24 vendor-advisory
- DSA-1070 vendor-advisory
- 20162 third-party-advisory
- 2004-0041 vendor-advisory
- DSA-1067 vendor-advisory
- DSA-1069 vendor-advisory
- RHSA-2004:505 vendor-advisory
- oval:org.mitre.oval:def:10665 vdb-entry signature
- 20202 third-party-advisory
- RHSA-2004:504 vendor-advisory
- 20338 third-party-advisory