Linux Kernel HID Thrustmaster Driver Stack-Out-of-Bounds Read Vulnerability

A stack-out-of-bounds read vulnerability has been identified in the Linux kernel's HID Thrustmaster driver. This issue arises in the usb_check_int_endpoints function within the usb.c core driver, where the ep_addr array is processed. The vulnerability occurs because the array is not properly terminated, leading to an attempt to access a non-existent element, which can crash the kernel. The vulnerability has been addressed by adding a null element at the end of the array to prevent the out-of-bounds read.

Impact

Exploitation of this vulnerability leads to a stack-out-of-bounds read, causing a kernel crash.