4.6
CVSSv3

CVE-2023-4010

Published: 31/07/2023 Updated: 07/11/2023
CVSS v3 Base Score: 4.6 | Impact Score: 3.6 | Exploitability Score: 0.9
VMScore: 0

Vulnerability Summary

A flaw was found in the USB Host Controller Driver framework in the Linux kernel. The usb_giveback_urb function has a logic loophole in its implementation. Due to the inappropriate judgment condition of the goto statement, the function cannot return under the input of a specific malformed descriptor file, so it falls into an endless loop, resulting in a denial of service.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

linux linux kernel -

redhat enterprise linux 8.0

redhat enterprise linux 9.0

Vendor Advisories

Description<!----> This CVE is under investigation by Red Hat Product Security ...

Github Repositories

a-usb-kernel-bug(CVE-2023-4010) The usb_giveback_urb function in the linux kernel has a logic loophole in its implementation Due to the inappropriate judgment condition of the goto statement, the function cannot return under the input of a specific malformed descriptor file, and it falls into an endless loop and occupies CPU resources, resulting in a denial of service atta