Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Niklas Neronin

Researcher fromIntel
#46129of 53,635
5.5Total CVSS
Vulnerabilities · 1
PT-2024-14744
5.5
2023-11-15
Linux · Linux Kernel · CVE-2023-52781
**Name of the Vulnerable Software and Affected Versions** Linux kernel (affected versions not specified) **Description** The issue is related to an iteration problem in the `usb get bos descriptor()` function when skipping the `USB DT DEVICE CAPABILITY` descriptor type. This results in the same descriptor being read repeatedly. A `goto` statement is introduced to ensure the pointer and the amount read are updated correctly, allowing the function to iterate to the next descriptor instead of reading the same one repeatedly. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.