CVE-2023-52781
Assigner: Linux
Published: 2024-05-21T15:31:00.242Z
State: PUBLISHED
descriptions: value: In the Linux kernel, the following vulnerability has been resolved:

usb: config: fix iteration issue in 'usb_get_bos_descriptor()'

The BOS descriptor defines a root descriptor and is the base descriptor for
accessing a family of related descriptors.

Function 'usb_get_bos_descriptor()' encounters an iteration issue when
skipping the 'USB_DT_DEVICE_CAPABILITY' descriptor type. This results in
the same descriptor being read repeatedly.

To address this issue, a 'goto' statement is introduced to ensure that the
pointer and the amount read is updated correctly. This ensures that the
function iterates to the next descriptor instead of reading the same
descriptor repeatedly.
affected: product: Linux
vendor: Linux
defaultStatus: unaffected
repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
versions: version: 3dd550a2d365
lessThan: 9ef94ec8e52e
status: affected
versionType: git
version: 3dd550a2d365
lessThan: 64c27b7b2357
status: affected
versionType: git
version: 3dd550a2d365
lessThan: f89fef7710b2
status: affected
versionType: git
version: 3dd550a2d365
lessThan: 7c0244cc311a
status: affected
versionType: git
version: 3dd550a2d365
lessThan: 974bba5c118f
status: affected
versionType: git
product: Linux
vendor: Linux
defaultStatus: affected
repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
versions: version: 5.4
status: affected
version: 0
lessThan: 5.4
status: unaffected
versionType: custom
version: 5.10.203
lessThanOrEqual: 5.10.*
status: unaffected
versionType: custom
version: 5.15.142
lessThanOrEqual: 5.15.*
status: unaffected
versionType: custom
version: 6.1.66
lessThanOrEqual: 6.1.*
status: unaffected
versionType: custom
version: 6.6.4
lessThanOrEqual: 6.6.*
status: unaffected
versionType: custom
version: 6.7
lessThanOrEqual: *
status: unaffected
versionType: original_commit_for_fix
title: usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
x_generator: engine: bippy-d175d3acf727