CVE-2023-52703

net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path

State: Published
Severity: 3.3 Low
Published: May 21, 2024
Updated: May 11, 2026
Reserved: Mar 7, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path

syzbot reported that act_len in kalmia_send_init_packet() is uninitialized when passing it to the first usb_bulk_msg error path. Jiri Pirko noted that it's pointless to pass it in the error path, and that the value that would be printed in the second error path would be the value of act_len from the first call to usb_bulk_msg.[1]

With this in mind, let's just not pass act_len to the usb_bulk_msg error paths.

1: https://lore.kernel.org/lkml/Y9pY61y1nwTuzMOa@nanopsycho/

Scores

CVSS	Score	Vector	Source
3.1	3.3 Low	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L	CISA-ADP

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	d40261236e8e278cb1936cb5e934262971692b10 to before 1b5de7d44890b78519acbcc80d8d1f23ff2872e5Affected d40261236e8e278cb1936cb5e934262971692b10 to before 723ef7b66f37c0841f5a451ccbce47ee1641e081Affected d40261236e8e278cb1936cb5e934262971692b10 to before a753352622b4f3c0219e0e9c73114b2848ae6042Affected d40261236e8e278cb1936cb5e934262971692b10 to before 525bdcb0838d19d918c7786151ee14661967a030Affected d40261236e8e278cb1936cb5e934262971692b10 to before 338f826d3afead6e4df521f7972a4bef04a72efbAffected d40261236e8e278cb1936cb5e934262971692b10 to before 02df3170c04a8356cd571ab9155a42f030190abcAffected d40261236e8e278cb1936cb5e934262971692b10 to before c68f345b7c425b38656e1791a0486769a8797016Affected
LinuxLinux	3.0Affected before 3.0Not affected 4.14.306 through 4.14.Not affected 4.19.273 through 4.19.Not affected 5.4.232 through 5.4.Not affected 5.10.169 through 5.10.Not affected 5.15.95 through 5.15.Not affected 6.1.13 through 6.1.Not affected 6.2 and laterNot affected

Product

Versions

LinuxLinux

d40261236e8e278cb1936cb5e934262971692b10 to before 1b5de7d44890b78519acbcc80d8d1f23ff2872e5Affected
d40261236e8e278cb1936cb5e934262971692b10 to before 723ef7b66f37c0841f5a451ccbce47ee1641e081Affected
d40261236e8e278cb1936cb5e934262971692b10 to before a753352622b4f3c0219e0e9c73114b2848ae6042Affected
d40261236e8e278cb1936cb5e934262971692b10 to before 525bdcb0838d19d918c7786151ee14661967a030Affected
d40261236e8e278cb1936cb5e934262971692b10 to before 338f826d3afead6e4df521f7972a4bef04a72efbAffected
d40261236e8e278cb1936cb5e934262971692b10 to before 02df3170c04a8356cd571ab9155a42f030190abcAffected
d40261236e8e278cb1936cb5e934262971692b10 to before c68f345b7c425b38656e1791a0486769a8797016Affected

LinuxLinux

3.0Affected
before 3.0Not affected
4.14.306 through 4.14.*Not affected
4.19.273 through 4.19.*Not affected
5.4.232 through 5.4.*Not affected
5.10.169 through 5.10.*Not affected
5.15.95 through 5.15.*Not affected
6.1.13 through 6.1.*Not affected
6.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.