An issue was discovered in the Linux kernel before 4.19.9. The USB subsystem mishandles size checks during the reading of an extra descriptor, related to __usb_get_extra_descriptor in drivers/usb/core/usb.c.
- https://usn.ubuntu.com/3879-1/
- https://usn.ubuntu.com/4118-1/
- https://github.com/ARPSyndicate/cvemon