CVE-2024-46747
HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
18 Sep 2024Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
In the Linux kernel, the following vulnerability has been resolved:
HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
report_fixup for the Cougar 500k Gaming Keyboard was not verifying
that the report descriptor size was correct before accessing it
Affected products
Linux · LinuxWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →References
https://git.kernel.org/stable/c/30e9ce7cd5591be639b53595c95812f1a2afdfdchttps://git.kernel.org/stable/c/34185de73d74fdc90e8651cfc472bfea6073a13fhttps://git.kernel.org/stable/c/48b2108efa205f4579052c27fba2b22cc6ad8aa0https://git.kernel.org/stable/c/890dde6001b651be79819ef7a3f8c71fc8f9cabfhttps://git.kernel.org/stable/c/a6e9c391d45b5865b61e569146304cff72821a5dhttps://git.kernel.org/stable/c/e239e44dcd419b13cf840e2a3a833204e4329714https://git.kernel.org/stable/c/e4a602a45aecd6a98b4b37482f5c9f8f67a32dddhttps://git.kernel.org/stable/c/fac3cb3c6428afe2207593a183b5bc4742529dfdhttps://lists.debian.org/debian-lts-announce/2024/10/msg00003.htmlhttps://lists.debian.org/debian-lts-announce/2025/01/msg00001.html