CVE-2023-53185

Published: Sep 15, 2025Modified: Jun 17, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes A bad USB device is able to construct a service connection response message with target endpoint being ENDPOINT0 which is reserved for HTC_CTRL_RSVD_SVC and should not be modified to be used for any other services. Reject such service connection responses. Found by Linux Verification Center (linuxtesting.org) with Syzkaller.

Affected (8)

Products: Linux: Linux Kernel

Linux

1 product

Linux Kernel

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	From 2.6.35 to 4.14.322
Linux Linux Kernel	From 4.15 to 4.19.291
Linux Linux Kernel	From 4.20 to 5.4.251
Linux Linux Kernel	From 5.11 to 5.15.121
Linux Linux Kernel	From 5.16 to 6.1.39
Linux Linux Kernel	From 5.5 to 5.10.188
Linux Linux Kernel	From 6.2 to 6.3.13
Linux Linux Kernel	From 6.4 to 6.4.4