Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2023-52781

usb: config: fix iteration issue in 'usb_get_bos_descriptor()'

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: usb: config: fix iteration issue in 'usb_get_bos_descriptor()' The BOS descriptor defines a root descriptor and is the base descriptor for accessing a family of related descriptors. Function 'usb_get_bos_descriptor()' encounters an iteration issue when skipping the 'USB_DT_DEVICE_CAPABILITY' descriptor type. This results in the same descriptor being read repeatedly. To address this issue, a 'goto' statement is introduced to ensure that the pointer and the amount read is updated correctly. This ensures that the function iterates to the next descriptor instead of reading the same descriptor repeatedly.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 3dd550a2d36596a1b0ee7955da3b611c031d3873 to < 9ef94ec8e52eaf7b9abc5b5f8f5b911751112223affected
  • 3dd550a2d36596a1b0ee7955da3b611c031d3873 to < 64c27b7b2357ddb38b6afebaf46d5bff4d250702affected
  • 3dd550a2d36596a1b0ee7955da3b611c031d3873 to < f89fef7710b2ba0f7a1e46594e530dcf2f77be91affected
  • 3dd550a2d36596a1b0ee7955da3b611c031d3873 to < 7c0244cc311a4038505b73682b7c8ceaa5c7a8c8affected
  • 3dd550a2d36596a1b0ee7955da3b611c031d3873 to < 974bba5c118f4c2baf00de0356e3e4f7928b4cbcaffected
  • 77ce180d68beffd1af620d0121590e16683fc6b8affected
  • 20a07e1aadcd6990893c532d1b2b507bfa065152affected
  • a5c051b6503c0ba543e993cfc295b64f096e0a29affected
  • ea4a173d8358b756a780786baa3fc39d282bdbe3affected
  • 77d4e2a058858b4a94fc469bc1bfc94a0958e252affected
  • 1fc15d29540a69cfb55c8b8f8c38f1af33178243affected
  • 9f8dd40c68c176f2c3f1fc8b87bc81756856938faffected
  • 3.16.79 to < 3.17affected
  • 4.4.194 to < 4.5affected
  • 4.9.194 to < 4.10affected
  • 4.14.146 to < 4.15affected
  • 4.19.75 to < 4.20affected
  • 5.2.17 to < 5.3affected
  • 5.3.1 to < 5.4affected

Linux Linux

Default version status: affected

  • 5.4affected
  • 0 to < 5.4unaffected
  • 5.10.203 to ≤ 5.10.*unaffected
  • 5.15.142 to ≤ 5.15.*unaffected
  • 6.1.66 to ≤ 6.1.*unaffected
  • 6.6.4 to ≤ 6.6.*unaffected
  • 6.7 to ≤ *unaffected

References