CVE-2023-52742

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

net: USB: Fix wrong-direction WARNING in plusb.c

The syzbot fuzzer detected a bug in the plusb network driver: A

zero-length control-OUT transfer was treated as a read instead of a

write. In modern kernels this error provokes a WARNING:

usb 1-1: BOGUS control dir, pipe 80000280 doesn't match bRequestType c0

WARNING: CPU: 0 PID: 4645 at drivers/usb/core/urb.c:411

usb_submit_urb+0x14a7/0x1880 drivers/usb/core/urb.c:411

Modules linked in:

CPU: 1 PID: 4645 Comm: dhcpcd Not tainted

6.2.0-rc6-syzkaller-00050-g9f266ccaa2f5 #0

Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google

01/12/2023

RIP: 0010:usb_submit_urb+0x14a7/0x1880 drivers/usb/core/urb.c:411

...

Call Trace:

<TASK>

usb_start_wait_urb+0x101/0x4b0 drivers/usb/core/message.c:58

usb_internal_control_msg drivers/usb/core/message.c:102 [inline]

usb_control_msg+0x320/0x4a0 drivers/usb/core/message.c:153

__usbnet_read_cmd+0xb9/0x390 drive

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References