d-os-descriptor

d-os-descriptor Summary The USB Gadget Subsystem includes security issues in the OS descriptor handling section of compositesetup function composite.c. Processing of properly crafted control transfer request messages result in device crash due to null pointer dereference or memory corruption...

The vulnerability of the composite_setup() function in the drivers/usb/gadget/composite.c module of the Linux USB device driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the compositesetup function in the drivers/usb/gadget/composite.c module of the Linux USB device driver relates to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, an...

ASB-A-222023189

In compositesetup of composite.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege when connecting a malicious USB device with no additional execution privileges needed. User interaction is not needed for exploitation...