CVE-2024-46747

HIGH

Linux Kernel Out-of-bounds Read in Cougar 500k Gaming Keyboard Report Descriptor

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup report_fixup for the Cougar 500k Gaming Keyboard was not verifying that the report descriptor size was correct before accessing it

References (10)

Core 10
Core References

Scores

CVSS v3 7.1
EPSS 0.0027
EPSS Percentile 18.2%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-125
Status published
Products (27)
linux/Kernel 4.19.0 - 4.19.322linux
linux/Kernel 4.20.0 - 5.4.284linux
linux/Kernel 5.11.0 - 5.15.167linux
linux/Kernel 5.16.0 - 6.1.110linux
linux/Kernel 5.5.0 - 5.10.226linux
linux/Kernel 6.2.0 - 6.6.51linux
linux/Kernel 6.7.0 - 6.10.10linux
Linux/Linux < 4.19
Linux/Linux 4.19
Linux/Linux 4.19.322 - 4.19.*
... and 17 more
Published Sep 18, 2024
Tracked Since Feb 18, 2026