CyberRota Analysis
AI-GeneratedThe vulnerability affects the Linux kernel's ims-pcu driver, which improperly assumes the first endpoint of the control interface is an interrupt IN endpoint without validation. This flaw could allow a malicious device to present a different endpoint type, potentially resulting in kernel warnings or undefined behavior. Organizations using Linux systems, particularly those utilizing the ims-pcu driver, should prioritize addressing this issue to maintain system stability and security.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - validate control endpoint type The driver currently assumes that the first endpoint of the control interface is an interrupt IN endpoint without verifying it. A malicious device could provide a different endpoint type, which would then be passed to usb_fill_int_urb(), potentially leading to kernel warnings or undefined behavior. Verify that the control endpoint is an interrupt IN endpoint.