CVE-2023-53847 is a Linux kernel vulnerability in the usb-storage alauda subdriver, specifically affecting how it handles USB transfers. The flaw stems from alauda_check_media() attempting to use data from a USB transfer without verifying its success, potentially leading to access of uninitialized memory. While no CVSS score is provided, the issue involves an uninitialized value and DMA to a stack buffer, suggesting a local attack vector with potential for system instability or information disclosure. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
| Linux | Linux | 2.6.16CNA affecteddefault affected | |
| Linux | Linux | >= e80b0fade09ef1ee67b0898d480d4c588f124d5f, < 044f4446e06bb03c52216697b14867ebc555ad3b, >= e80b0fade09ef1ee67b0898d480d4c588f124d5f, < 0d2d5282d39aed6f27dfe1ed60a5f3934ebd21cd, >= e80b0fade09ef1ee67b0898d480d4c588f124d5f, < 153c3e85873cc3e2f387169783c3a227bad9a95a, >= e80b0fade09ef1ee67b0898d480d4c588f124d5f, < 373e0ab8c4c516561493f1acf367c7ee7dc053c2, >= e80b0fade09ef1ee67b0898d480d4c588f124d5f, < 49d380bcd6cba987c6085fae6464c9c087e8d9a0, >= e80b0fade09ef1ee67b0898d480d4c588f124d5f, < 7a11d1e2625bdb2346f6586773b20b20977278ac, >= e80b0fade09ef1ee67b0898d480d4c588f124d5f, < a6ff6e7a9dd69364547751db0f626a10a6d628d2, >= e80b0fade09ef1ee67b0898d480d4c588f124d5f, < fe7c3a445d22783d27fe8bd0521a8aab1eb9da65CNA affecteddefault unaffected |
CVSS data has not been published for this CVE.
No media coverage found for this CVE.