The Linux kernel's USB serial driver for mct_u232 devices lacked a sanity check on the size of interrupt-in transfers. This omission allowed the kernel to potentially parse stale or uninitialized slab memory data and expose it to user space processes, leading to information leakage. The vulnerability has been addressed by adding the missing sanity check to validate interrupt-in transfer sizes, preventing leakage of uninitialized kernel memory.

This vulnerability could lead to unintended disclosure of kernel memory contents to user space, potentially exposing sensitive information. There is no indication of known exploits in the wild. The impact is limited to information leakage via the affected USB serial driver.

A fix has been applied in the Linux kernel source code to add the missing sanity check. Users and administrators should update their Linux kernel to a version that includes this fix. Patch status is not explicitly confirmed in the provided data; therefore, verify with the official Linux kernel advisories or vendor updates for the exact fixed versions and apply updates accordingly.