CVE-2023-54213

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.2.0-rc5-syzkaller-00199-g5af6ce704936

Description The Linux kernel driver for sisusbvga devices lacked checks to ensure the validity of USB endpoints, specifically their presence and type. This deficiency allowed the syzbot fuzzer to trigger a WARNING message, indicating a potential issue with USB transfer handling. The issue occurs during bulk out messages, potentially leading to unexpected behavior or system instability. The sisusb bulkout msg function and related functions like sisusb send bulk msg, sisusb send bridge packet, and sisusb do init gfxdevice are involved in the process.

Recommendations Update to version 6.2.0-rc5-syzkaller-00199-g5af6ce704936 or a later version to include the endpoint checks.