CVE-2023-54213

CVE-2023-54213 concerns the Linux kernel USB driver sisusbvga, where the driver probes endpoints without validating their presence or type. The result can provoke a kernel warning from usb_submit_urb and may lead to instability. The published fix is to add a check validating endpoints before use ...

CVE-2023-54213 USB: sisusbvga: Add endpoint checks

In the Linux kernel, the following vulnerability has been resolved: USB: sisusbvga: Add endpoint checks The syzbot fuzzer was able to provoke a WARNING from the sisusbvga driver: ------------ cut here ------------ usb 1-1: BOGUS urb xfer, pipe 3 != type 1 WARNING: CPU: 1 PID: 26 at...

PT-2025-54042

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.2.0-rc5-syzkaller-00199-g5af6ce704936 Description The Linux kernel driver for sisusbvga devices lacked checks to ensure the validity of USB endpoints, specifically their presence and type. This deficiency allow...