漏洞标题
USB: aqc111: 检查用于修复真正的限制的包
漏洞描述信息
在Linux内核中，已解决以下漏洞：
usb：aqc111：对真正的限制进行修复的检查数据包
如果设备发送的包在0和sizeof(u64)之间，传递给skb_trim()作为长度的值将会溢出，最终成为一个非常大的值。
然后，驱动程序将处理该位置处的头部，这将导致程序崩溃或处理一些随机值。
修复方法是将检查改为sizeof(u64)而不是0，这是当前驱动程序所做的。此问题自驱动程序引入以来就存在。
CVSS信息
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
漏洞类别
整数溢出或超界折返
漏洞标题
usb: aqc111: check packet for fixup for true limit
漏洞描述信息
In the Linux kernel, the following vulnerability has been resolved:
usb: aqc111: check packet for fixup for true limit
If a device sends a packet that is inbetween 0
and sizeof(u64) the value passed to skb_trim()
as length will wrap around ending up as some very
large value.
The driver will then proceed to parse the header
located at that position, which will either oops or
process some random value.
The fix is to check against sizeof(u64) rather than
0, which the driver currently does. The issue exists
since the introduction of the driver.
CVSS信息
N/A
漏洞类别
N/A
漏洞标题
Linux kernel 安全漏洞
漏洞描述信息
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于未检查数据包。
CVSS信息
N/A
漏洞类别
其他