CVE-2023-37453: Linux Kernel

Medium severity, CVSS 4.6. EPSS: 0.6% chance of exploitation in the next 30 days.

An issue was discovered in the USB subsystem in the Linux kernel through 6.4.2. There is an out-of-bounds and crash in read_descriptors in drivers/usb/core/sysfs.c.

Affected products

• Linux Linux Kernel: up to and including 6.4.2

Published 2023-07-06. Last modified 2026-06-17.