Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wjv9-48rg-r5cr

Опубликовано: 31 июл. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 4.6

Описание

A flaw was found in the USB Host Controller Driver framework in the Linux kernel. The usb_giveback_urb function has a logic loophole in its implementation. Due to the inappropriate judgment condition of the goto statement, the function cannot return under the input of a specific malformed descriptor file, so it falls into an endless loop, resulting in a denial of service.

A flaw was found in the USB Host Controller Driver framework in the Linux kernel. The usb_giveback_urb function has a logic loophole in its implementation. Due to the inappropriate judgment condition of the goto statement, the function cannot return under the input of a specific malformed descriptor file, so it falls into an endless loop, resulting in a denial of service.

4.6 Medium

CVSS3

Дефекты

CWE-835

Связанные уязвимости

ubuntu
около 3 лет назад

A flaw was found in the USB Host Controller Driver framework in the Linux kernel. The usb_giveback_urb function has a logic loophole in its implementation. Due to the inappropriate judgment condition of the goto statement, the function cannot return under the input of a specific malformed descriptor file, so it falls into an endless loop, resulting in a denial of service.

CVSS3: 4.6
redhat
около 3 лет назад

A flaw was found in the USB Host Controller Driver framework in the Linux kernel. The usb_giveback_urb function has a logic loophole in its implementation. Due to the inappropriate judgment condition of the goto statement, the function cannot return under the input of a specific malformed descriptor file, so it falls into an endless loop, resulting in a denial of service.

nvd
около 3 лет назад

Rejected reason: Rejected because the CVE description attributes a vulnerability to a non-existent Linux kernel function (usb_giveback_urb()) and the reported issue cannot be mapped to any valid codebase.

CVSS3: 4.6
fstec
около 3 лет назад

Уязвимость функции usb_giveback_urb ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 9.3
redos
около 3 лет назад

Множественные уязвимости ядра ОС

4.6 Medium

CVSS3

Дефекты

CWE-835