CyberRota Analysis
AI-GeneratedThe Linux kernel's ims-pcu driver is vulnerable due to inadequate validation of CDC union descriptor lengths, allowing a malicious device to send a descriptor with a bLength of 0, which can trigger an infinite loop in the driver. This could lead to denial-of-service conditions, affecting system stability and availability. Organizations using affected Linux systems, particularly those relying on the ims-pcu driver for device communication, should prioritize patching this vulnerability to mitigate potential disruptions.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - fix potential infinite loop in CDC union descriptor parsing The driver parses CDC union descriptors in ims_pcu_get_cdc_union_desc() by iterating through the extra descriptor data. However, it does not verify that the bLength of each descriptor is at least 2. A malicious device could provide a descriptor with bLength = 0, leading to an infinite loop in the driver. Add a check to ensure bLength is at least 2 before proceeding with parsing.