CyberRota Analysis
AI-GeneratedThe vulnerability affects the keyspan_pda driver in the Linux kernel, where an improper return value from the write() callback can lead to an information leak by allowing data to be written beyond the intended buffer limits. This could potentially expose sensitive information or lead to unexpected behavior in applications relying on this driver. Organizations using affected Linux systems, particularly those utilizing USB serial devices, should prioritize addressing this issue to mitigate potential data exposure risks.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: USB: serial: keyspan_pda: fix information leak The write() callback is supposed to return the number of characters accepted or a negative errno. Since the addition of write fifo support the keyspan_pda implementation will however return the number characters submitted to the device if the write urb is not already in use. If this number is larger than the number of characters passed to write(), the line discipline continues writing data from beyond the tty write buffer. Fix the information leak by making sure that keyspan_pda_write_start() returns zero on success as intended.