CVE-2023-4010
published 2023-07-31CVE-2023-4010: A flaw was found in the USB Host Controller Driver framework in the Linux kernel. The usb_giveback_urb function has a logic loophole in its implementation. Due…
PriorityP415medium4.6CVSS 3.1
AVPACLPRNUINSUCNINAH
EPSS
0.52%
41.0th percentile
A flaw was found in the USB Host Controller Driver framework in the Linux kernel. The usb_giveback_urb function has a logic loophole in its implementation. Due to the inappropriate judgment condition of the goto statement, the function cannot return under the input of a specific malformed descriptor file, so it falls into an endless loop, resulting in a denial of service.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | — | — |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
CVSS provenance
nvdv3.14.6MEDIUMCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
osv4.6MEDIUM
vendor_debian4.6MEDIUM
vendor_redhat4.6MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: usb: hcd: malformed USB descriptor leads to infinite loop in usb_giveback_urb()
vendor_redhat·2023-07-13·CVSS 4.6
CVE-2023-4010 [MEDIUM] CWE-835 kernel: usb: hcd: malformed USB descriptor leads to infinite loop in usb_giveback_urb()
kernel: usb: hcd: malformed USB descriptor leads to infinite loop in usb_giveback_urb()
A flaw was found in the USB Host Controller Driver framework in the Linux kernel. The usb_giveback_urb function has a logic loophole in its implementation. Due to the inappropriate judgment condition of the goto statement, the function cannot return under the input of a specific malformed descriptor file, so it falls into an endless loop, resulting in a denial of service.
A flaw was found in the USB Host Controller Driver framework in the Linux kernel. The usb_giveback_urb function has a logic loophole in its implementation. Due to the inappropriate judgment condition of the goto statement, the function cannot return under the input of a specific malformed descriptor file, so it falls into an endless
Debian
CVE-2023-4010: linux - A flaw was found in the USB Host Controller Driver framework in the Linux kernel...
vendor_debian·2023·CVSS 4.6
CVE-2023-4010 [MEDIUM] CVE-2023-4010: linux - A flaw was found in the USB Host Controller Driver framework in the Linux kernel...
A flaw was found in the USB Host Controller Driver framework in the Linux kernel. The usb_giveback_urb function has a logic loophole in its implementation. Due to the inappropriate judgment condition of the goto statement, the function cannot return under the input of a specific malformed descriptor file, so it falls into an endless loop, resulting in a denial of service.
Scope: local
bookworm: open
bullseye: open
forky: open
sid: open
trixie: open
GHSA
GHSA-wjv9-48rg-r5cr: A flaw was found in the USB Host Controller Driver framework in the Linux kernel
ghsa_unreviewed·2023-07-31
CVE-2023-4010 [MEDIUM] CWE-835 GHSA-wjv9-48rg-r5cr: A flaw was found in the USB Host Controller Driver framework in the Linux kernel
A flaw was found in the USB Host Controller Driver framework in the Linux kernel. The usb_giveback_urb function has a logic loophole in its implementation. Due to the inappropriate judgment condition of the goto statement, the function cannot return under the input of a specific malformed descriptor file, so it falls into an endless loop, resulting in a denial of service.
OSV
CVE-2023-4010: A flaw was found in the USB Host Controller Driver framework in the Linux kernel
osv·2023-07-31·CVSS 4.6
CVE-2023-4010 [MEDIUM] CVE-2023-4010: A flaw was found in the USB Host Controller Driver framework in the Linux kernel
A flaw was found in the USB Host Controller Driver framework in the Linux kernel. The usb_giveback_urb function has a logic loophole in its implementation. Due to the inappropriate judgment condition of the goto statement, the function cannot return under the input of a specific malformed descriptor file, so it falls into an endless loop, resulting in a denial of service.
No detection rules found.
No public exploits indexed.
2023-07-31
Published