CyberRota Analysis
AI-GeneratedThe vulnerability in the Linux kernel affects the mct_u232 USB serial driver, where a missing sanity check on interrupt-in transfer sizes could lead to the exposure of stale or uninitialized memory data to user space. This could potentially allow an attacker to read sensitive information from memory, posing a risk to system confidentiality. Organizations utilizing affected Linux systems, particularly those relying on USB serial communications, should prioritize applying the patch to mitigate this risk.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: USB: serial: mct_u232: fix missing interrupt-in transfer sanity check Add the missing sanity check on the size of interrupt-in transfers to avoid parsing stale or uninitialised slab data (and leaking it to user space).