CVE-2023-52781

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-52781

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

I

n the Linux kernel, the following vulnerability has been resolved: usb: config: fix iteration issue in 'usb_get_bos_descriptor()' The BOS descriptor defines a root descriptor and is the base descriptor for accessing a family of related descriptors. Function 'usb_get_bos_descriptor()' encounters an iteration issue when skipping the 'USB_DT_DEVICE_CAPABILITY' descriptor type. This results in the same descriptor being read repeatedly. To address this issue, a 'goto' statement is introduced to ensure that the pointer and the amount read is updated correctly. This ensures that the function iterates to the next descriptor instead of reading the same descriptor repeatedly.

References
Link Resource
https://git.kernel.org/stable/c/64c27b7b2357ddb38b6afebaf46d5bff4d250702 Patch
https://git.kernel.org/stable/c/7c0244cc311a4038505b73682b7c8ceaa5c7a8c8 Patch
https://git.kernel.org/stable/c/974bba5c118f4c2baf00de0356e3e4f7928b4cbc Patch
https://git.kernel.org/stable/c/9ef94ec8e52eaf7b9abc5b5f8f5b911751112223 Patch
https://git.kernel.org/stable/c/f89fef7710b2ba0f7a1e46594e530dcf2f77be91 Patch
https://git.kernel.org/stable/c/64c27b7b2357ddb38b6afebaf46d5bff4d250702 Patch
https://git.kernel.org/stable/c/7c0244cc311a4038505b73682b7c8ceaa5c7a8c8 Patch
https://git.kernel.org/stable/c/974bba5c118f4c2baf00de0356e3e4f7928b4cbc Patch
https://git.kernel.org/stable/c/9ef94ec8e52eaf7b9abc5b5f8f5b911751112223 Patch
https://git.kernel.org/stable/c/f89fef7710b2ba0f7a1e46594e530dcf2f77be91 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.7:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.7:rc2:*:*:*:*:*:*
History

25 Sep 2025, 16:40

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
References () https://git.kernel.org/stable/c/64c27b7b2357ddb38b6afebaf46d5bff4d250702 - () https://git.kernel.org/stable/c/64c27b7b2357ddb38b6afebaf46d5bff4d250702 - Patch
References () https://git.kernel.org/stable/c/7c0244cc311a4038505b73682b7c8ceaa5c7a8c8 - () https://git.kernel.org/stable/c/7c0244cc311a4038505b73682b7c8ceaa5c7a8c8 - Patch
References () https://git.kernel.org/stable/c/974bba5c118f4c2baf00de0356e3e4f7928b4cbc - () https://git.kernel.org/stable/c/974bba5c118f4c2baf00de0356e3e4f7928b4cbc - Patch
References () https://git.kernel.org/stable/c/9ef94ec8e52eaf7b9abc5b5f8f5b911751112223 - () https://git.kernel.org/stable/c/9ef94ec8e52eaf7b9abc5b5f8f5b911751112223 - Patch
References () https://git.kernel.org/stable/c/f89fef7710b2ba0f7a1e46594e530dcf2f77be91 - () https://git.kernel.org/stable/c/f89fef7710b2ba0f7a1e46594e530dcf2f77be91 - Patch
CPE cpe:2.3:o:linux:linux_kernel:6.7:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.7:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CWE CWE-670
First Time Linux
Linux linux Kernel

21 Nov 2024, 08:40

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se resolvió la siguiente vulnerabilidad: usb: config: soluciona el problema de iteración en 'usb_get_bos_descriptor()'. El descriptor BOS define un descriptor raíz y es el descriptor base para acceder a una familia de descriptores relacionados. La función 'usb_get_bos_descriptor()' encuentra un problema de iteración al omitir el tipo de descriptor 'USB_DT_DEVICE_CAPABILITY'. Esto da como resultado que el mismo descriptor se lea repetidamente. Para solucionar este problema, se introduce una declaración 'goto' para garantizar que el puntero y la cantidad leída se actualicen correctamente. Esto garantiza que la función pase al siguiente descriptor en lugar de leer el mismo descriptor repetidamente.
References () https://git.kernel.org/stable/c/64c27b7b2357ddb38b6afebaf46d5bff4d250702 - () https://git.kernel.org/stable/c/64c27b7b2357ddb38b6afebaf46d5bff4d250702 -
References () https://git.kernel.org/stable/c/7c0244cc311a4038505b73682b7c8ceaa5c7a8c8 - () https://git.kernel.org/stable/c/7c0244cc311a4038505b73682b7c8ceaa5c7a8c8 -
References () https://git.kernel.org/stable/c/974bba5c118f4c2baf00de0356e3e4f7928b4cbc - () https://git.kernel.org/stable/c/974bba5c118f4c2baf00de0356e3e4f7928b4cbc -
References () https://git.kernel.org/stable/c/9ef94ec8e52eaf7b9abc5b5f8f5b911751112223 - () https://git.kernel.org/stable/c/9ef94ec8e52eaf7b9abc5b5f8f5b911751112223 -
References () https://git.kernel.org/stable/c/f89fef7710b2ba0f7a1e46594e530dcf2f77be91 - () https://git.kernel.org/stable/c/f89fef7710b2ba0f7a1e46594e530dcf2f77be91 -

21 May 2024, 16:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-21 16:15

Updated : 2025-09-25 16:40

NVD link : CVE-2023-52781

Mitre link : CVE-2023-52781

CVE.ORG link : CVE-2023-52781

JSON object : View

Products Affected

linux

CWE
CWE-670

Always-Incorrect Control Flow Implementation