CVE-2024-46836

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the ast udc getstatus() function in the aspeed udc module of the Linux kernel's USB gadget driver. It involves incorrect index calculation, which could allow an attacker to impact the confidentiality, integrity, and availability of protected information. The problem arises from the lack of validation of the endpoint index, potentially allowing a host to manipulate the index to point past the endpoint array.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.