CyberRota Analysis
AI-GeneratedA memory corruption vulnerability exists in the Linux kernel's USB serial driver for Cypress M8 devices, where a malicious device could report a smaller interrupt-out endpoint max packet size, leading to potential user-controlled slab corruption or NULL-pointer dereference. This issue poses a risk to systems utilizing affected Linux distributions with connected Cypress M8 USB devices. Administrators and security teams managing Linux environments should prioritize this vulnerability to mitigate potential exploitation risks.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: USB: serial: cypress_m8: fix memory corruption with small endpoint Make sure that the interrupt-out endpoint max packet size is at least eight bytes to avoid user-controlled slab corruption or NULL-pointer dereference should a malicious device report a smaller size.