CVE-2023-4010

usb: hcd: malformed USB descriptor leads to infinite loop in usb_giveback_urb()

References

https://bugzilla.redhat.com/show_bug.cgi?id=2227726
https://github.com/wanrenmi/a-usb-kernel-bug

Notes

 bwh> This might be related to commit 26c6c2f8a907 "USB: HCD: Fix URB
 bwh> giveback issue in tasklet function" but I have not investigated
 bwh> that.

Bugs

Status

Branch	Status
4.19-buster-security	unknown
4.19-upstream-stable	unknown
5.10-bullseye-security	unknown
5.10-upstream-stable	unknown
6.1-bookworm-security	unknown
6.1-upstream-stable	unknown
6.6-upstream-stable	unknown
6.8-upstream-stable	unknown
sid	unknown
upstream	unknown