CVE-2023-52781

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
21/05/2024
Last modified:
25/09/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> usb: config: fix iteration issue in &amp;#39;usb_get_bos_descriptor()&amp;#39;<br /> <br /> The BOS descriptor defines a root descriptor and is the base descriptor for<br /> accessing a family of related descriptors.<br /> <br /> Function &amp;#39;usb_get_bos_descriptor()&amp;#39; encounters an iteration issue when<br /> skipping the &amp;#39;USB_DT_DEVICE_CAPABILITY&amp;#39; descriptor type. This results in<br /> the same descriptor being read repeatedly.<br /> <br /> To address this issue, a &amp;#39;goto&amp;#39; statement is introduced to ensure that the<br /> pointer and the amount read is updated correctly. This ensures that the<br /> function iterates to the next descriptor instead of reading the same<br /> descriptor repeatedly.

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 3.16.79 (including) 3.17 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 4.4.194 (including) 4.5 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 4.9.194 (including) 4.10 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 4.14.146 (including) 4.15 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 4.19.75 (including) 4.20 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.2.17 (including) 5.3 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.3.1 (including) 5.10.203 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.11 (including) 5.15.142 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.16 (including) 6.1.66 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.2 (including) 6.6.4 (excluding)
cpe:2.3:o:linux:linux_kernel:6.7:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.7:rc2:*:*:*:*:*:*