CVE-2023-52703
Assigner: Linux
Published: 2024-05-21T15:22:52.687Z
State: PUBLISHED
descriptions: value: In the Linux kernel, the following vulnerability has been resolved:

net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path

syzbot reported that act_len in kalmia_send_init_packet() is
uninitialized when passing it to the first usb_bulk_msg error path. Jiri
Pirko noted that it's pointless to pass it in the error path, and that
the value that would be printed in the second error path would be the
value of act_len from the first call to usb_bulk_msg.[1]

With this in mind, let's just not pass act_len to the usb_bulk_msg error
paths.

1: https://lore.kernel.org/lkml/Y9pY61y1nwTuzMOa@nanopsycho/
affected: product: Linux
vendor: Linux
defaultStatus: unaffected
repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
versions: version: d40261236e8e
lessThan: 1b5de7d44890
status: affected
versionType: git
version: d40261236e8e
lessThan: 723ef7b66f37
status: affected
versionType: git
version: d40261236e8e
lessThan: a753352622b4
status: affected
versionType: git
version: d40261236e8e
lessThan: 525bdcb0838d
status: affected
versionType: git
version: d40261236e8e
lessThan: 338f826d3afe
status: affected
versionType: git
version: d40261236e8e
lessThan: 02df3170c04a
status: affected
versionType: git
version: d40261236e8e
lessThan: c68f345b7c42
status: affected
versionType: git
product: Linux
vendor: Linux
defaultStatus: affected
repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
versions: version: 3.0
status: affected
version: 0
lessThan: 3.0
status: unaffected
versionType: custom
version: 4.14.306
lessThanOrEqual: 4.14.*
status: unaffected
versionType: custom
version: 4.19.273
lessThanOrEqual: 4.19.*
status: unaffected
versionType: custom
version: 5.4.232
lessThanOrEqual: 5.4.*
status: unaffected
versionType: custom
version: 5.10.169
lessThanOrEqual: 5.10.*
status: unaffected
versionType: custom
version: 5.15.95
lessThanOrEqual: 5.15.*
status: unaffected
versionType: custom
version: 6.1.13
lessThanOrEqual: 6.1.*
status: unaffected
versionType: custom
version: 6.2
lessThanOrEqual: *
status: unaffected
versionType: original_commit_for_fix
title: net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
x_generator: engine: bippy-d175d3acf727