CVE-2023-53840
Awaiting Analysis Awaiting Analysis - Queue
BaseFortify

Publication date: 2025-12-09

Last updated on: 2025-12-09

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: usb: early: xhci-dbc: Fix a potential out-of-bound memory access If xdbc_bulk_write() fails, the values in 'buf' can be anything. So the string is not guaranteed to be NULL terminated when xdbc_trace() is called. Reserve an extra byte, which will be zeroed automatically because 'buf' is a static variable, in order to avoid troubles, should it happen.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-12-09
Last Modified
2025-12-09
Generated
2026-05-07
AI Q&A
2025-12-09
EPSS Evaluated
2026-05-05
NVD
EUVD
Affected Vendors & Products
Currently, no data is known.
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?

This vulnerability is a potential out-of-bound memory access in the Linux kernel's USB early xHCI driver (xhci-dbc). Specifically, if the function xdbc_bulk_write() fails, the buffer 'buf' may contain arbitrary data and is not guaranteed to be NULL terminated when xdbc_trace() is called. This can lead to accessing memory beyond the intended buffer. The fix involves reserving an extra byte in the buffer, which is zeroed automatically, to prevent such out-of-bound access.


How can this vulnerability impact me? :

The vulnerability could lead to out-of-bound memory access, which may cause system instability, crashes, or potentially allow an attacker to read or corrupt memory. This could affect the reliability and security of systems using the affected Linux kernel USB driver.


Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70
EPSS Chart