CVE-2023-37453

2023-07-0600:00:00

ubuntu.com

usb subsystem

linux kernel

out-of-bounds

crash

read_descriptors

0.0005 Low

EPSS

Percentile

16.2%

JSON

An issue was discovered in the USB subsystem in the Linux kernel through
6.4.2. There is an out-of-bounds and crash in read_descriptors in
drivers/usb/core/sysfs.c.

Bugs

Notes

Author	Note
seth-arnold	In the lkml thread there’s discussion of other data structures that might have the same problem, it would be worth looking through later commits to see if those were addressed or not.

OSVersionArchitecturePackageVersionFilename
ubuntu20.04noarchlinux< 5.4.0-169.187UNKNOWN
ubuntu22.04noarchlinux< 5.15.0-91.101UNKNOWN
ubuntu23.04noarchlinux< 6.2.0-39.40UNKNOWN
ubuntu23.10noarchlinux< 6.5.0-6.6UNKNOWN
ubuntu24.04noarchlinux< anyUNKNOWN
ubuntu20.04noarchlinux-aws< 5.4.0-1116.126UNKNOWN
ubuntu22.04noarchlinux-aws< 5.15.0-1051.56UNKNOWN
ubuntu23.04noarchlinux-aws< 6.2.0-1017.17UNKNOWN
ubuntu23.10noarchlinux-aws< 6.5.0-1006.6UNKNOWN
ubuntu24.04noarchlinux-aws< anyUNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	20.04	noarch	linux	< 5.4.0-169.187	UNKNOWN
ubuntu	22.04	noarch	linux	< 5.15.0-91.101	UNKNOWN
ubuntu	23.04	noarch	linux	< 6.2.0-39.40	UNKNOWN
ubuntu	23.10	noarch	linux	< 6.5.0-6.6	UNKNOWN
ubuntu	24.04	noarch	linux	< any	UNKNOWN
ubuntu	20.04	noarch	linux-aws	< 5.4.0-1116.126	UNKNOWN
ubuntu	22.04	noarch	linux-aws	< 5.15.0-1051.56	UNKNOWN
ubuntu	23.04	noarch	linux-aws	< 6.2.0-1017.17	UNKNOWN
ubuntu	23.10	noarch	linux-aws	< 6.5.0-1006.6	UNKNOWN
ubuntu	24.04	noarch	linux-aws	< any	UNKNOWN