Critical Vulnerability in Linux Package: NULL Pointer Dereference in gs_usb Driver
Summary
DEBIAN-CVE-2023-53523: In the Linux kernel, the following vulnerability has been resolved: can: gs_usb: fix time stamp counter initialization If the gs_usb device driver is unloaded (or unbound) before the interface is shut down, the USB stack... Affects linux versions 6.1.106-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux package is a core component of the Debian operating system, providing essential functionalities for managing hardware and system resources. It includes drivers for various devices, including USB interfaces. The gs_usb driver specifically handles USB CAN (Controller Area Network) devices, allowing communication between the host system and CAN networks. This package is crucial for applications that rely on real-time data exchange in automotive and industrial environments.
Vulnerability Detail
A vulnerability has been identified in the gs_usb driver of the Linux kernel, which can lead to a NULL pointer dereference. This issue arises when the gs_usb device driver is unloaded before the interface is properly shut down. During this race condition, the USB device can still receive CAN frames, leading to potential crashes or undefined behavior when the timestamp functionality is invoked prematurely. This vulnerability can affect systems using the gs_usb driver, particularly those with multiple CAN channels, as the cycle counter setup is not correctly managed, resulting in further instability.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can avoid unloading the gs_usb driver while the interface is still active. This can be done by ensuring that all CAN channels are properly stopped before unloading the driver. Additionally, monitoring the system for any unexpected behavior during the operation of the gs_usb driver can help mitigate risks until a full patch is applied.
Conclusion
The identified vulnerability in the gs_usb driver of the Linux package poses significant risks to systems utilizing this driver. It is crucial for users to update to the patched version to mitigate these risks. In the meantime, following the outlined workarounds can help maintain system stability.
See every vulnerability recorded for linux →
FAQ
The vulnerability is a NULL pointer dereference in the gs_usb driver, which can occur if the driver is unloaded before the interface is shut down.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
Exploiting this vulnerability can lead to system crashes, undefined behavior, and instability in applications relying on the gs_usb driver.
Yes, the patched version of the Linux package is 6.4.11-1 for Debian 13 and 14. Updating to this version will resolve the issue.
If an immediate update is not possible, ensure that the gs_usb driver is not unloaded while in use and monitor the system for any irregularities.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
