Linux Kernel USB Driver Vulnerability in Control Transfer Processing

CVE-2023-53761

What is CVE-2023-53761?

A vulnerability in the Linux kernel's USB TMC (Test and Measurement Class) driver was identified, which fails to validate the control direction for zero-length ioctl operations. When an ioctl request is issued with a zero-length control transfer, the driver inadequately checks that the direction bit is set to OUT, potentially leading to erroneous handling of USB requests. This oversight could allow malicious actors to exploit this vulnerability, resulting in unintended behavior or system instability. The issue has been patched to ensure that the bRequestType field is correctly overridden, thus enhancing the robustness of the USB control message handling.

References