Threats tagged 'ghsa-7v5q-9hp6-p273'

CVE-2024-41035 is a medium-severity vulnerability in the Linux kernel's USB core subsystem. It arises from a bug where reserved bits in the bEndpointAddress field of USB endpoint descriptors were not cleared, causing the system to misidentify duplicate endpoints. This can lead to confusion in endpoint handling, potentially impacting system stability or availability. The issue has been fixed by clearing these reserved bits during descriptor parsing.