In the Linux kernel, the following vulnerability has been resolved: USB: serial: cypress_m8: validate interrupt packet headers cypress_read_int_callback() parses the interrupt-in buffer according t…
Info
Summary
In the Linux kernel, the following vulnerability has been resolved: USB: serial: cypress_m8: validate interrupt packet headers cypress_read_int_callback() parses the interrupt-in buffer according to the selected Cypress packet format. Format 1 has a two-byte status/count header and format 2 has a one-byte combined status/count header. The usb-serial core sizes the interrupt-in buffer from the endpoint descriptor's wMaxPacketSize, and successful interrupt transfers can complete short when URB_…
In-depth triage · Auto channel
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Sources
- NVD DATABASE
Original Links
- https://git.kernel.org/stable/c/44f9bab8df7750a1e2a4d6cc22d7c9c2dc096aed
- https://git.kernel.org/stable/c/4a4cb0021ebe1fcadb52e04d19ed8d71470a530b
- https://git.kernel.org/stable/c/90664556916de22467097d4c8ceb716d597a5c32
- https://git.kernel.org/stable/c/9f9bfc80c67f35a275820da7e83a35dface08281
- https://git.kernel.org/stable/c/aaa66708bfb1dca2acd219d1c1582f9f6d5492cb
- https://git.kernel.org/stable/c/ae03453f2c809ca3cf73753269fa6184dea7160f
- https://git.kernel.org/stable/c/be50533fe7068e86eb7adb81988e6d6a3f6dfe53
- https://git.kernel.org/stable/c/fcef31a5a85ccf3c313449a866ec6ed7e4132425
Timeline
- nvd_ingest NVD