CyberRota Analysis
AI-GeneratedA vulnerability in the Linux kernel affects the handling of CPC messages in the ems_usb driver, where improper validation of message lengths could lead to buffer overflows. This flaw may allow an attacker to exploit the USB receive buffer, potentially compromising system integrity or causing denial of service. Linux system administrators and developers using the affected kernel versions should prioritize applying patches to mitigate the risk.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: can: ems_usb: validate CPC message lengths ems_usb_read_bulk_callback() walks CPC messages packed in one USB receive buffer. Check that each declared message fits in the URB payload. Also require the type-specific payload to cover the fields used by the CAN, state, error and overrun handlers.