Security tracker / CVE-2023-53840

CVE-2023-53840

usb: early: xhci-dbc: Fix a potential out-of-bound memory access

References

• Debian security tracker
• cve.org

Notes

 carnil> Introduced in aeb9dd1de98c ("usb/early: Add driver for xhci debug capability").
 carnil> Vulnerable versions: 4.12.

Bugs

Status

Branch	Status
upstream	released (6.3-rc1) [a4a97ab3db5c081eb6e7dba91306adefb461e0bd]
6.18-upstream-stable	N/A "Fixed before branching point"
6.17-upstream-stable	N/A "Fixed before branching point"
6.12-upstream-stable	N/A "Fixed before branching point"
6.6-upstream-stable	N/A "Fixed before branching point"
6.1-upstream-stable	released (6.1.16) [351c8d8650d1ccc006255fa01f98b6c6496a02e5]
5.10-upstream-stable	needed
sid	released (6.1.20-1)
6.12-trixie-security	N/A "Fixed before branching point"
6.1-bookworm-security	N/A "Fixed before branching point"
5.10-bullseye-security	needed