CVE-2024-42236 is a vulnerability in the Linux kernel's USB gadget configfs subsystem where an out-of-bounds (OOB) read and write can occur in the usb_string_copy() function. This happens because a userspace provided string of length zero is not properly checked, leading to an OOB read and write at index -1. The issue has been resolved by adding a validation check to prevent strings that are too short.