CVE-2023-37453

MediumCVSS 4.6

Published: 06/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.55%

42th percentile - higher than 42% of all known CVEs

Summary

An issue was discovered in the USB subsystem in the Linux kernel through 6.4.2, leading to an out-of-bounds error and crash in read_descriptors in drivers/usb/core/sysfs.c.

Risk Assessment

This vulnerability may lead to system crashes, potentially affecting the availability of services within the organization.

Recommendation

It is recommended to update the Linux kernel to version 6.4.3 or later to mitigate this vulnerability.

Original NVD description (English source)

An issue was discovered in the USB subsystem in the Linux kernel through 6.4.2. There is an out-of-bounds and crash in read_descriptors in drivers/usb/core/sysfs.c.