https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 01:49:41 +0000 https://vulnerability.circl.lu/vuln/cve-2023-52703 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>net/usb: kalmia: Don&#39;t pass act_len in usb_bulk_msg error path</p> <p>syzbot reported that act_len in kalmia_send_init_packet() is uninitialized when passing it to the first usb_bulk_msg error path. Jiri Pirko noted that it&#39;s pointless to pass it in the error path, and that the value that would be printed in the second error path would be the value of act_len from the first call to usb_bulk_msg.[1]</p> <p>With this in mind, let&#39;s just not pass act_len to the usb_bulk_msg error paths.</p> <p>1: https://lore.kernel.org/lkml/Y9pY61y1nwTuzMOa@nanopsycho/</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>net/usb: kalmia: Don&#39;t pass act_len in usb_bulk_msg error path</p> <p>syzbot reported that act_len in kalmia_send_init_packet() is uninitialized when passing it to the first usb_bulk_msg error path. Jiri Pirko noted that it&#39;s pointless to pass it in the error path, and that the value that would be printed in the second error path would be the value of act_len from the first call to usb_bulk_msg.[1]</p> <p>With this in mind, let&#39;s just not pass act_len to the usb_bulk_msg error paths.</p> <p>1: https://lore.kernel.org/lkml/Y9pY61y1nwTuzMOa@nanopsycho/</p> https://vulnerability.circl.lu/vuln/cve-2023-52703