Linux Kernel HID CP2112 Buffer Overflow Vulnerability

A buffer overflow vulnerability has been identified in the Linux kernel's HID CP2112 driver. The issue arises in the 'cp2112_xfer()' function, where the 'read_length' variable, sourced from user input, can take values between 0 and 255. This variable is used to determine the length of data to be read, but without proper validation, it can lead to a buffer overflow when the length exceeds the allocated buffer size. The vulnerability has been addressed by adding an upper limit to the 'read_length' variable, ensuring it does not exceed the buffer capacity.

Impact

Exploitation of this vulnerability could lead to a buffer overflow, potentially allowing for arbitrary code execution or causing a denial-of-service condition.