CyberRota Analysis
AI-GeneratedA vulnerability exists in the Linux kernel's USB subsystem, where the input buffer length is incorrectly compared to the output buffer length during bulk message transfers. This flaw could lead to improper handling of data, potentially resulting in data corruption or denial of service. Linux system administrators and developers working with USB devices should prioritize addressing this issue to ensure the integrity and reliability of their systems.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: usb: misc: usbio: check ibuf_len against rxbuf_len in bulk msg ibuf_len is the bulk IN (receive) buffer size, but the EMSGSIZE check in usbio_bulk_msg() compares it against txbuf_len — the bulk OUT endpoint size. Both are taken independently from different endpoints in usbio_probe(), so the check is wrong when they differ. Use rxbuf_len for the IN direction. This matches the buffer that actually holds the response data.