CVE-2023-52781: usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
First published: Tue May 21 2024(Updated: )
In the Linux kernel, the following vulnerability has been resolved: usb: config: fix iteration issue in 'usb_get_bos_descriptor()' The BOS descriptor defines a root descriptor and is the base descriptor for accessing a family of related descriptors. Function 'usb_get_bos_descriptor()' encounters an iteration issue when skipping the 'USB_DT_DEVICE_CAPABILITY' descriptor type. This results in the same descriptor being read repeatedly. To address this issue, a 'goto' statement is introduced to ensure that the pointer and the amount read is updated correctly. This ensures that the function iterates to the next descriptor instead of reading the same descriptor repeatedly.
Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
| Affected Software | Affected Version | How to fix |
|---|---|---|
| redhat/kernel | <5.10.203 | 5.10.203 |
| redhat/kernel | <5.15.142 | 5.15.142 |
| redhat/kernel | <6.1.66 | 6.1.66 |
| redhat/kernel | <6.6.4 | 6.6.4 |
| redhat/kernel | <6.7 | 6.7 |
| IBM Security Verify Governance - Identity Manager | <=ISVG 10.0.2 | |
| IBM Security Verify Governance, Identity Manager Software Stack | <=ISVG 10.0.2 | |
| IBM Security Verify Governance, Identity Manager Virtual Appliance | <=ISVG 10.0.2 | |
| IBM Security Verify Governance Identity Manager Container | <=ISVG 10.0.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://git.kernel.org/stable/c/64c27b7b2357ddb38b6afebaf46d5bff4d250702
- https://git.kernel.org/stable/c/7c0244cc311a4038505b73682b7c8ceaa5c7a8c8
- https://git.kernel.org/stable/c/974bba5c118f4c2baf00de0356e3e4f7928b4cbc
- https://git.kernel.org/stable/c/9ef94ec8e52eaf7b9abc5b5f8f5b911751112223
- https://git.kernel.org/stable/c/f89fef7710b2ba0f7a1e46594e530dcf2f77be91
- https://access.redhat.com/security/cve/CVE-2023-52781
- https://lore.kernel.org/linux-cve-announce/2024052153-CVE-2023-52781-8f04@gregkh/T
- https://access.redhat.com/errata/RHSA-2024:4211
- https://access.redhat.com/errata/RHSA-2024:4352
- https://bugzilla.redhat.com/show_bug.cgi?id=2282698
- https://www.ibm.com/support/pages/node/7230443 (Advisory)
Frequently Asked Questions
What is the severity of CVE-2023-52781?
CVE-2023-52781 has been classified with a medium severity level due to the potential impact on USB descriptor handling in the Linux kernel.
How do I fix CVE-2023-52781?
To fix CVE-2023-52781, update your kernel to versions 5.10.203, 5.15.142, 6.1.66, 6.6.4, or 6.7 depending on your system.
Which systems are affected by CVE-2023-52781?
Systems running specific versions of the Linux kernel and IBM Security Verify Governance products are affected by CVE-2023-52781.
What does CVE-2023-52781 affect in the Linux kernel?
CVE-2023-52781 affects the USB subsystem, specifically how the kernel handles the iteration of BOS descriptors.
Is CVE-2023-52781 exploitable remotely?
CVE-2023-52781 does not appear to be directly exploitable remotely, but it could lead to local privilege escalation if successfully leveraged.
- agent/title
- agent/first-publish-date
- agent/type
- collector/nvd-api
- source/NVD
- agent/author
- agent/severity
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2023-52781
- agent/software-canonical-lookup
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/references
- agent/source
- agent/softwarecombine
- agent/description
- agent/tags
- agent/event
- collector/ibm-support
- source/IBM
- agent/software-canonical-lookup-request
- package-manager/redhat
- vendor/ibm
- canonical/ibm security verify governance - identity manager
- version/ibm security verify governance - identity manager/isvg 10.0.2
- canonical/ibm security verify governance, identity manager software stack
- version/ibm security verify governance, identity manager software stack/isvg 10.0.2
- canonical/ibm security verify governance, identity manager virtual appliance
- version/ibm security verify governance, identity manager virtual appliance/isvg 10.0.2
- canonical/ibm security verify governance identity manager container
- version/ibm security verify governance identity manager container/isvg 10.0.2