Linux Kernel Keyspan USB Serial Driver Missing Sanity Check Vulnerability

A vulnerability exists in the Linux kernel's USB serial Keyspan driver, specifically for the USA-49WG model. The issue arises from a missing sanity check on incoming data transfers, which can lead to the driver parsing outdated or uninitialized memory. This vulnerability has been addressed by adding the necessary checks to prevent such data from being processed.

Impact

The absence of proper data validation could allow for the manipulation of memory, potentially leading to undefined behavior in the driver.

Reproduction

The vulnerability can be reproduced by connecting a Keyspan USA-49WG USB serial device to a system running an affected version of the Linux kernel. Once the device is connected, the driver will handle incoming data transfers without the necessary sanity checks, allowing for the parsing of stale or uninitialized slab data.

Remediation

Users can upgrade to the latest version of the Linux kernel where this vulnerability has been fixed. Instructions for downloading the patched kernel can be found on the official Linux kernel website.