Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wjv9-48rg-r5cr

Опубликовано: 31 июл. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 4.6

Описание

A flaw was found in the USB Host Controller Driver framework in the Linux kernel. The usb_giveback_urb function has a logic loophole in its implementation. Due to the inappropriate judgment condition of the goto statement, the function cannot return under the input of a specific malformed descriptor file, so it falls into an endless loop, resulting in a denial of service.

A flaw was found in the USB Host Controller Driver framework in the Linux kernel. The usb_giveback_urb function has a logic loophole in its implementation. Due to the inappropriate judgment condition of the goto statement, the function cannot return under the input of a specific malformed descriptor file, so it falls into an endless loop, resulting in a denial of service.

EPSS

Процентиль: 1%
0.00009
Низкий

4.6 Medium

CVSS3

Дефекты

CWE-835

Связанные уязвимости

CVSS3: 4.6
ubuntu
почти 2 года назад

A flaw was found in the USB Host Controller Driver framework in the Linux kernel. The usb_giveback_urb function has a logic loophole in its implementation. Due to the inappropriate judgment condition of the goto statement, the function cannot return under the input of a specific malformed descriptor file, so it falls into an endless loop, resulting in a denial of service.

CVSS3: 4.6
redhat
почти 2 года назад

A flaw was found in the USB Host Controller Driver framework in the Linux kernel. The usb_giveback_urb function has a logic loophole in its implementation. Due to the inappropriate judgment condition of the goto statement, the function cannot return under the input of a specific malformed descriptor file, so it falls into an endless loop, resulting in a denial of service.

CVSS3: 4.6
nvd
почти 2 года назад

A flaw was found in the USB Host Controller Driver framework in the Linux kernel. The usb_giveback_urb function has a logic loophole in its implementation. Due to the inappropriate judgment condition of the goto statement, the function cannot return under the input of a specific malformed descriptor file, so it falls into an endless loop, resulting in a denial of service.

CVSS3: 4.6
debian
почти 2 года назад

A flaw was found in the USB Host Controller Driver framework in the Li ...

CVSS3: 4.6
fstec
почти 2 года назад

Уязвимость функции usb_giveback_urb ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 1%
0.00009
Низкий

4.6 Medium

CVSS3

Дефекты

CWE-835