PT-2023-9731 · Linux+3 · Linux Kernel+3
Syzbot
·
Publicado
2023-02-06
·
Atualizado
2024-11-25
·
CVE-2023-52742
CVSS v3.1
5.5
Média
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.2.0-rc6-syzkaller-00050-g9f266ccaa2f5
Description
A bug was detected in the plusb network driver where a zero-length control-OUT transfer was treated as a read instead of a write, provoking a WARNING in modern kernels. The vulnerability is related to the
pl vendor req function in the plusb.c file. To exploit this issue, an attacker would need to send a specially crafted control-OUT transfer. The fix is to call usbnet write cmd() instead of usbnet read cmd() and remove the USB DIR IN flag.Recommendations
To resolve the issue, update the Linux kernel to a version that includes the fix for the wrong-direction WARNING in
plusb.c. Specifically, the fix involves calling usbnet write cmd() instead of usbnet read cmd() and removing the USB DIR IN flag. As a temporary workaround, consider disabling the pl vendor req function until a patch is available.Exploit
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Astra Linux
Linux Kernel
Red Os
Suse