Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2023-53840

usb: early: xhci-dbc: Fix a potential out-of-bound memory access

Description

In the Linux kernel, the following vulnerability has been resolved: usb: early: xhci-dbc: Fix a potential out-of-bound memory access If xdbc_bulk_write() fails, the values in 'buf' can be anything. So the string is not guaranteed to be NULL terminated when xdbc_trace() is called. Reserve an extra byte, which will be zeroed automatically because 'buf' is a static variable, in order to avoid troubles, should it happen.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • aeb9dd1de98c1a5f2007ea5d2a154c1244caf8a0 to < e8fb0f13e45cf361fd06593d3cb2d89915cd3bd0affected
  • aeb9dd1de98c1a5f2007ea5d2a154c1244caf8a0 to < 351c8d8650d1ccc006255fa01f98b6c6496a02e5affected
  • aeb9dd1de98c1a5f2007ea5d2a154c1244caf8a0 to < df7c8aba7309f4dc55df94e06b67f576c0f52406affected
  • aeb9dd1de98c1a5f2007ea5d2a154c1244caf8a0 to < a4a97ab3db5c081eb6e7dba91306adefb461e0bdaffected

Linux Linux

Default version status: affected

  • 4.12affected
  • 0 to < 4.12unaffected
  • 5.15.99 to ≤ 5.15.*unaffected
  • 6.1.16 to ≤ 6.1.*unaffected
  • 6.2.3 to ≤ 6.2.*unaffected
  • 6.3 to ≤ *unaffected

References