An out-of-bounds read vulnerability in the Linux kernel USB network driver allows unauthenticated attackers to leak sensitive heap memory information.

This vulnerability is an out-of-bounds read flaw within the GeneLink (GL620A) USB network driver. An unauthenticated attacker can exploit this by providing malicious USB device data to trigger a kernel heap information leak.

Successful exploitation allows an attacker to read sensitive information from the kernel heap, which may include cryptographic keys or other security-relevant data. Given the CVSS score of 8.1, this is a high-severity issue that could lead to full system compromise or facilitate further attacks. The ability to trigger this without authentication significantly increases the potential threat landscape for affected systems.

Immediate Action: Update the Linux kernel to version 5.10.261, 5.15.212, 6.1.178, 6.6.145, or later.

Proactive Monitoring: Monitor system logs for unusual USB device connection events or kernel-related crashes that might indicate exploitation attempts.

Compensating Controls: Restrict physical access to USB ports on critical systems and implement hardware-level controls to prevent unauthorized USB devices from being connected.

Public Exploit Available: Yes, public proof-of-concept exploits are available.

This vulnerability presents a significant risk to systems utilizing the GeneLink USB network driver. Security teams should prioritize patching affected kernels immediately to prevent unauthorized memory disclosure. Given the existence of public exploit code, the urgency for remediation is high.