USB: serial mct_u232 missing interrupt-in transfer sanity check

Executive Summary

This vulnerability in the Linux kernel involves a missing sanity check on the size of interrupt-in transfers for the USB serial driver mct_u232. Without this check, stale or uninitialised slab data could be parsed and leaked to user space.

Useful 0 Not Useful 0

Detection Guidance

This vulnerability is specific to the Linux kernel's USB serial driver mct_u232. Detection requires checking kernel logs for USB-related errors or unexpected behavior. Use commands like dmesg | grep mct_u232 or journalctl -k | grep mct_u232 to inspect kernel messages for issues related to USB interrupt-in transfers.

Useful 0 Not Useful 0

Impact Analysis

An attacker with physical access to a system using the mct_u232 USB serial driver could exploit this flaw to read uninitialised kernel memory, potentially exposing sensitive data or causing system instability.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability involves a missing sanity check on USB interrupt-in transfers in the Linux kernel, which could lead to parsing stale or uninitialised slab data and leaking it to user space. It does not directly impact compliance with standards like GDPR or HIPAA, as those focus on data protection and privacy rather than kernel-level USB driver issues.

Useful 0 Not Useful 0

Mitigation Strategies

Update the Linux kernel to the latest stable version that includes the fix for this vulnerability. If immediate patching is not possible, consider disabling the mct_u232 module temporarily using modprobe -r mct_u232 until the update is applied.

Useful 0 Not Useful 0