CVE-2023-53185: wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes
In the Linux kernel, the following vulnerability has been resolved:
wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes
A bad USB device is able to construct a service connection response message with target endpoint being ENDPOINT0 which is reserved for HTCCTRLRSVDSVC and should not be modified to be used for any other services.
Reject such service connection responses.
Found by Linux Verification Center (linuxtesting.org) with Syzkaller.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Apply the kernel fix for ath9k so that service connection responses targeting ENDPOINT0 are rejected and ENDPOINT0 attributes cannot be overwritten.
Linux kernel (wifi: ath9k) ENDPOINT0 handling for service connection responses = Reject such service connection responses; do not allow overwriting ENDPOINT0 attributes - Compensating control
Reject service connection responses where the target endpoint is ENDPOINT0 (reserved for services) and do not allow ENDPOINT0 attributes to be overwritten (wifi: ath9k).
Event History
Frequently Asked Questions
What is the severity of CVE-2023-53185?
CVE-2023-53185 is considered a moderate severity vulnerability in the Linux kernel.
How does CVE-2023-53185 affect the Linux kernel?
CVE-2023-53185 allows a malicious USB device to compromise the reserved ENDPOINT0 attributes in the Linux kernel, potentially leading to a denial of service.
How do I fix CVE-2023-53185?
To fix CVE-2023-53185, update your Linux kernel to the latest stable version that includes the security patch.
Which versions of Linux kernel are affected by CVE-2023-53185?
CVE-2023-53185 affects multiple versions of the Linux kernel prior to the patch release.
What is the nature of the attack vector for CVE-2023-53185?
The attack vector for CVE-2023-53185 involves a crafted service connection response from a bad USB device targeting the kernel.