CyberRota Analysis
AI-GeneratedA vulnerability in the Linux kernel's RNDIS gadget function allows for insufficient length checks on response queries, potentially leading to buffer overflows or other unexpected behaviors. This issue could be exploited by attackers to manipulate data or crash the system. Linux system administrators and developers working with USB gadget functionality should prioritize addressing this vulnerability to enhance system security.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: function: rndis: add length check to response query Add variable representations for BufLength and BufOffset in rndis_query_response(), and perform a length check on them. This is identical to how rndis_set_response() handles these parameters.