CyberRota Analysis
AI-GeneratedThe vulnerability in the Linux kernel affects the USB serial driver for mxuport, where insufficient validation of the bulk-out endpoint's maximum packet size can lead to user-controlled slab memory corruption. This flaw could allow an attacker with a malicious USB device to exploit the system, potentially leading to arbitrary code execution or denial of service. Linux system administrators and developers utilizing affected kernel versions should prioritize patching to mitigate this risk.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: USB: serial: mxuport: fix memory corruption with small endpoint Make sure that the bulk-out endpoint max packet size is at least eight bytes to avoid user-controlled slab corruption should a malicious device report a smaller size.