Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's handling of USB CAN interfaces, specifically within the ETAS ES58X driver, has been addressed. The issue arose in the function 'es58x_alloc_rx_urbs()', which incorrectly treated partial allocation of USB Request Blocks (URBs) as a fatal error. This mismanagement caused the 'es58x_open()' function to exit prematurely, leading to a leak of allocated URBs. The driver is intended to manage partial allocations properly, and the fix involves modifying the allocation function to return a success code when at least one URB is successfully allocated. This change restores the correct behavior and prevents resource leaks in the 'es58x_open()' function.
The vulnerability could lead to resource leaks by failing to properly clean up allocated URBs when an error occurs during the allocation process.
Users can apply the latest patches available in the Linux kernel stable tree to address this vulnerability.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.