CyberRota Analysis
AI-GeneratedThe Linux kernel's mct_u232 USB serial driver is vulnerable to memory corruption due to improper handling of maximum transfer sizes for devices that only accept 16-byte packets. This flaw could allow a malicious device to exploit the driver, leading to potential slab corruption and instability in the system. Organizations using affected Linux systems, particularly those interfacing with USB serial devices, should prioritize patching this vulnerability to mitigate risks associated with device exploitation.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: USB: serial: mct_u232: fix memory corruption with small endpoint The driver overrides the maximum transfer size for a specific device which only accepts 16 byte packets for its 32 byte bulk-out endpoint. Make sure to never increase the maximum transfer size to prevent slab corruption should a malicious device report a smaller endpoint max packet size than expected.