Linux Kernel Out-of-Bounds Read Vulnerability in USB Gadget Configfs

An out-of-bounds read vulnerability has been identified in the Linux kernel's USB gadget configuration filesystem. This issue arises when an empty string is written to the 'qw_sign' or 'landingPage' sysfs attributes. The store functions attempt to access the last character of the string before confirming that the string length is greater than zero, leading to a potential out-of-bounds read. The vulnerability has been addressed by adding a length check to handle zero-length inputs appropriately, preventing the out-of-bounds access.

Impact

Exploitation of this vulnerability could lead to an out-of-bounds read, potentially allowing for information disclosure or causing a denial-of-service condition.