【漏洞】【OpenHarmony-3.2-Release】 CVE-2023-37453

一、漏洞信息
漏洞编号: CVE-2023-37453
漏洞归属组件: linux-5.10
漏洞归属版本: 5.10.97
CVSS V3.0分值:
BaseScore: -1.0 未知
Vector: NA
漏洞简述: An issue was discovered in the USB subsystem in the Linux kernel through 6.4.2. There is an out-of-bounds and crash in read_descriptors in drivers/usb/core/sysfs.c.
漏洞公开时间:
漏洞创建时间: 2023-07-07 11:00:08
漏洞详情参考链接: https://nvd.nist.gov/vuln/detail/CVE-2023-37453

更多参考(点击展开)

链接地址
https://lore.kernel.org/all/000000000000c0ffe505fe86c9ca@google.com/T/
https://lore.kernel.org/all/000000000000e56434059580f86e@google.com/T/
https://syzkaller.appspot.com/bug?extid=18996170f8096c6174d0

漏洞分析指导链接:
漏洞数据来源:
其他:
漏洞补丁信息:

详情(点击展开)

影响的包	修复版本	修复补丁	来源
linux-5.10

二、漏洞分析结构反馈
影响性分析说明:
Vulnerability Summary for CVE-2023-37453
openHarmony评分:
受影响版本排查(受影响/不受影响):
1.OpenHarmony-3.0-LTS:
2.OpenHarmony-3.1-Release:
3.OpenHarmony-1.0.1_release:
4.master:
三、漏洞修复
安全公告链接:

感谢提交Issue！关于Issue的交互操作，请访问OpenHarmony社区支持命令清单。如果有问题，请联系 @lijiawei @weiyj @朱佳鑫。如果需要调整订阅PR、Issue的变更状态，请访问链接。

Thanks for submitting the issue. For more commands, please visit OpenHarmony Command List. If you have any questions, please refer to committer @lijiawei @weiyj @朱佳鑫 for help. If you need to change the subscription of a Pull Request or Issue, please visit the link.

主线未合入社区及hulk无正式补丁

!1123:master 分支CVE同步

OpenHarmony / kernel_linux_5.10

内容风险标识

评论 (3)

OpenHarmony / kernel_linux_5.10 .gitee-modal { width: 500px !important; }

内容风险标识