An issue was discovered in the USB subsystem in the Linux kernel through 6.4.2. There is an out-of-bounds and crash in read_descriptors in drivers/usb/core/sysfs.c.
{
"cna_assigner": "mitre",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/37xxx/CVE-2023-37453.json",
"unresolved_ranges": [
{
"extracted_events": [
{
"range": [
{
"last_affected": "6.4.2"
}
],
"source": "DESCRIPTION"
}
]
}
]
}{
"extracted_events": [
{
"range": [
{
"fixed": "1e4c574225cc5a0553115e5eb5787d1474db5b0f"
}
],
"source": "REFERENCES_COMMIT"
},
{
"range": [
{
"fixed": "85d07c55621676d47d873d2749b88f783cd4d5a1"
}
],
"source": "REFERENCES_COMMIT"
},
{
"range": [
{
"fixed": "de28e469da75359a2bb8cd8778b78aa64b1be1f4"
}
],
"source": "REFERENCES_COMMIT"
},
{
"range": [
{
"fixed": "ff33299ec8bb80cdcc073ad9c506bd79bb2ed20b"
}
],
"source": "REFERENCES_COMMIT"
}
]
}