Executive Summary

This vulnerability in the Linux kernel involves the USB core configuration where the function usb_parse_ss_endpoint_companion() checks the descriptor type before verifying the length. This can lead to an out-of-bounds (OOB) read, meaning the function might read data outside the intended buffer size, potentially causing unexpected behavior or crashes. The fix involves checking the size first before accessing any fields in the descriptor to prevent such OOB reads.

Useful 0 Not Useful 0

Impact Analysis

The vulnerability can lead to out-of-bounds reads in the USB subsystem of the Linux kernel, which may cause system instability, crashes, or potentially allow attackers to exploit the behavior for further attacks such as information disclosure or privilege escalation, depending on the context and exploitability.

Useful 0 Not Useful 0