In the Linux kernel, the following vulnerability has been resolved:
net/usb: kalmia: Don't pass actlen in usbbulk_msg error path
syzbot reported that actlen in kalmiasendinitpacket() is uninitialized when passing it to the first usbbulkmsg error path. Jiri Pirko noted that it's pointless to pass it in the error path, and that the value that would be printed in the second error path would be the value of actlen from the first call to usbbulk_msg.[1]
With this in mind, let's just not pass actlen to the usbbulk_msg error paths.
1: https://lore.kernel.org/lkml/Y9pY61y1nwTuzMOa@nanopsycho/
[
{
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"257706998077208733063016367883329004285",
"40166556545551822637554550458404450295",
"248293901142386605627536464632364219377",
"88054579297444667085102056538324856283",
"167057920860305552014274928398803129973",
"275881677700772018663968481752317209587",
"222688636156843439442100725596027655616",
"242513097328918693452767326393924738027",
"266329899979532039741121680465448103564",
"248666058208161722404606881246712373633"
]
},
"target": {
"file": "drivers/net/usb/kalmia.c"
},
"signature_version": "v1",
"id": "CVE-2023-52703-10c8bf40",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a753352622b4f3c0219e0e9c73114b2848ae6042"
},
{
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"257706998077208733063016367883329004285",
"40166556545551822637554550458404450295",
"248293901142386605627536464632364219377",
"88054579297444667085102056538324856283",
"167057920860305552014274928398803129973",
"275881677700772018663968481752317209587",
"222688636156843439442100725596027655616",
"242513097328918693452767326393924738027",
"266329899979532039741121680465448103564",
"248666058208161722404606881246712373633"
]
},
"target": {
"file": "drivers/net/usb/kalmia.c"
},
"signature_version": "v1",
"id": "CVE-2023-52703-1362af0e",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@723ef7b66f37c0841f5a451ccbce47ee1641e081"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "79142162685660502116231807009096952366",
"length": 949.0
},
"target": {
"file": "drivers/net/usb/kalmia.c",
"function": "kalmia_send_init_packet"
},
"signature_version": "v1",
"id": "CVE-2023-52703-2714ba89",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@338f826d3afead6e4df521f7972a4bef04a72efb"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "79142162685660502116231807009096952366",
"length": 949.0
},
"target": {
"file": "drivers/net/usb/kalmia.c",
"function": "kalmia_send_init_packet"
},
"signature_version": "v1",
"id": "CVE-2023-52703-30810d88",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@723ef7b66f37c0841f5a451ccbce47ee1641e081"
},
{
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"257706998077208733063016367883329004285",
"40166556545551822637554550458404450295",
"248293901142386605627536464632364219377",
"88054579297444667085102056538324856283",
"167057920860305552014274928398803129973",
"275881677700772018663968481752317209587",
"222688636156843439442100725596027655616",
"242513097328918693452767326393924738027",
"266329899979532039741121680465448103564",
"248666058208161722404606881246712373633"
]
},
"target": {
"file": "drivers/net/usb/kalmia.c"
},
"signature_version": "v1",
"id": "CVE-2023-52703-46a994a7",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c68f345b7c425b38656e1791a0486769a8797016"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "79142162685660502116231807009096952366",
"length": 949.0
},
"target": {
"file": "drivers/net/usb/kalmia.c",
"function": "kalmia_send_init_packet"
},
"signature_version": "v1",
"id": "CVE-2023-52703-5dd0258d",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a753352622b4f3c0219e0e9c73114b2848ae6042"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "79142162685660502116231807009096952366",
"length": 949.0
},
"target": {
"file": "drivers/net/usb/kalmia.c",
"function": "kalmia_send_init_packet"
},
"signature_version": "v1",
"id": "CVE-2023-52703-60cf19bc",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@02df3170c04a8356cd571ab9155a42f030190abc"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "79142162685660502116231807009096952366",
"length": 949.0
},
"target": {
"file": "drivers/net/usb/kalmia.c",
"function": "kalmia_send_init_packet"
},
"signature_version": "v1",
"id": "CVE-2023-52703-6d8f72f9",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@525bdcb0838d19d918c7786151ee14661967a030"
},
{
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"257706998077208733063016367883329004285",
"40166556545551822637554550458404450295",
"248293901142386605627536464632364219377",
"88054579297444667085102056538324856283",
"167057920860305552014274928398803129973",
"275881677700772018663968481752317209587",
"222688636156843439442100725596027655616",
"242513097328918693452767326393924738027",
"266329899979532039741121680465448103564",
"248666058208161722404606881246712373633"
]
},
"target": {
"file": "drivers/net/usb/kalmia.c"
},
"signature_version": "v1",
"id": "CVE-2023-52703-91669e4c",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@525bdcb0838d19d918c7786151ee14661967a030"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "79142162685660502116231807009096952366",
"length": 949.0
},
"target": {
"file": "drivers/net/usb/kalmia.c",
"function": "kalmia_send_init_packet"
},
"signature_version": "v1",
"id": "CVE-2023-52703-9d1cbe1a",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c68f345b7c425b38656e1791a0486769a8797016"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "79142162685660502116231807009096952366",
"length": 949.0
},
"target": {
"file": "drivers/net/usb/kalmia.c",
"function": "kalmia_send_init_packet"
},
"signature_version": "v1",
"id": "CVE-2023-52703-a4c3c978",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1b5de7d44890b78519acbcc80d8d1f23ff2872e5"
},
{
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"257706998077208733063016367883329004285",
"40166556545551822637554550458404450295",
"248293901142386605627536464632364219377",
"88054579297444667085102056538324856283",
"167057920860305552014274928398803129973",
"275881677700772018663968481752317209587",
"222688636156843439442100725596027655616",
"242513097328918693452767326393924738027",
"266329899979532039741121680465448103564",
"248666058208161722404606881246712373633"
]
},
"target": {
"file": "drivers/net/usb/kalmia.c"
},
"signature_version": "v1",
"id": "CVE-2023-52703-cac89337",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1b5de7d44890b78519acbcc80d8d1f23ff2872e5"
},
{
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"257706998077208733063016367883329004285",
"40166556545551822637554550458404450295",
"248293901142386605627536464632364219377",
"88054579297444667085102056538324856283",
"167057920860305552014274928398803129973",
"275881677700772018663968481752317209587",
"222688636156843439442100725596027655616",
"242513097328918693452767326393924738027",
"266329899979532039741121680465448103564",
"248666058208161722404606881246712373633"
]
},
"target": {
"file": "drivers/net/usb/kalmia.c"
},
"signature_version": "v1",
"id": "CVE-2023-52703-df7bc56a",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@02df3170c04a8356cd571ab9155a42f030190abc"
},
{
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"257706998077208733063016367883329004285",
"40166556545551822637554550458404450295",
"248293901142386605627536464632364219377",
"88054579297444667085102056538324856283",
"167057920860305552014274928398803129973",
"275881677700772018663968481752317209587",
"222688636156843439442100725596027655616",
"242513097328918693452767326393924738027",
"266329899979532039741121680465448103564",
"248666058208161722404606881246712373633"
]
},
"target": {
"file": "drivers/net/usb/kalmia.c"
},
"signature_version": "v1",
"id": "CVE-2023-52703-e244234f",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@338f826d3afead6e4df521f7972a4bef04a72efb"
}
]