NetSight
IP …
high7.8

CVE-2024-42236

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: configfs: Prevent OOB read/write in usb_string_copy() Userspace provided strin…

Impact

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: configfs: Prevent OOB read/write in usb_string_copy() Userspace provided string 's' could trivially have the length zero. Left unchecked this will firstly result in an OOB read in the form `if (str[0 - 1] == '\n') followed closely by an OOB write in the form `str[0 - 1] = '\0'`. There is already a validating check to catch strings that are too long. Let's supply an additional check for invalid strings that are too short.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 4.19.318
from 4.20 before 5.4.280
from 5.5 before 5.10.222
from 5.11 before 5.15.163
from 5.16 before 6.1.100
from 6.2 before 6.6.41

Weakness classification

CWE-787

References