CVE-2023-37453CWE-125

CVE-2023-37453

Medium · published July 6, 2023

CVSS v3.1
4.6
EPSS
1%
Percentile
50.3
In the wild
Unconfirmed
What it is

An issue was discovered in the USB subsystem in the Linux kernel through 6.4.2. There is an out-of-bounds and crash in read_descriptors in drivers/usb/core/sysfs.c.

The record
Technical detail
CVSS v3.1
4.6 · MEDIUM
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00646 · 50.3th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2023-07-06T21:15Z
Affected products (1)
ProductVersionsFixed in
linux/linux_kernel≤ 6.4.2—
References (15)
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=1e4c574225cc5a0553115e5eb5787d1474db5b0f · [email protected]https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=85d07c55621676d47d873d2749b88f783cd4d5a1 · [email protected]https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=de28e469da75359a2bb8cd8778b78aa64b1be1f4 · [email protected]https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ff33299ec8bb80cdcc073ad9c506bd79bb2ed20b · [email protected]https://lore.kernel.org/all/000000000000c0ffe505fe86c9ca%40google.com/T/ · [email protected]https://lore.kernel.org/all/000000000000e56434059580f86e%40google.com/T/ · [email protected]https://syzkaller.appspot.com/bug?extid=18996170f8096c6174d0 · [email protected]https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=1e4c574225cc5a0553115e5eb5787d1474db5b0f · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=85d07c55621676d47d873d2749b88f783cd4d5a1 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=de28e469da75359a2bb8cd8778b78aa64b1be1f4 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ff33299ec8bb80cdcc073ad9c506bd79bb2ed20b · af854a3a-2127-422b-91ae-364da2661108https://lore.kernel.org/all/000000000000c0ffe505fe86c9ca%40google.com/T/ · af854a3a-2127-422b-91ae-364da2661108https://lore.kernel.org/all/000000000000e56434059580f86e%40google.com/T/ · af854a3a-2127-422b-91ae-364da2661108https://syzkaller.appspot.com/bug?extid=18996170f8096c6174d0 · af854a3a-2127-422b-91ae-364da2661108https://cert-portal.siemens.com/productcert/html/ssa-794697.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
EPSS history
Timeline
  • 06 JUL 00:00Z
    An issue was discovered in the USB subsystem in the Linux kernel through 6.4.2
    cvelistv5