AZL-72995
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-72995.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-72995
- Upstream
- Published
- 2025-12-23T14:16:40Z
- Modified
- 2026-04-01T05:22:14.535376Z
- Summary
- CVE-2025-68343 affecting package kernel for versions less than 6.6.119.3-1
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
can: gsusb: gsusbreceivebulkcallback(): check actuallength before accessing header
The driver expects to receive a struct gshostframe in gsusbreceivebulkcallback().
Use structgroup to describe the header of the struct gshost_frame and check that we have at least received the header before accessing any members of it.
To resubmit the URB, do not dereference the pointer chain "dev->parent->hfsizerx" but use "parent->hfsizerx" instead. Since "urb->context" contains "parent", it is always defined, while "dev" is not defined if the URB it too short.
- References