The Linux media driver "igorplugusb" mismanages the control request by passing a pointer to its internal request structure instead of the actual request data to usb_fill_control_urb. This error causes the USB core to interpret the pointer bytes as a setup packet, producing an invalid bRequestType and triggering kernel warnings such as "BOGUS control dir". The flaw stems from an incorrect type conversion (CWE‑843) and may lead to repeated warnings or potential kernel instability, although a crash is not explicitly documented.

All Linux kernel builds that include the media IGOR USB driver prior to the commit that allocates the request structure and corrects its passing are affected. The vulnerability resides in the core kernel and therefore spans all distributions shipping the unpatched driver and driver version windows such as 7.1 rc1 through rc5.

The EPSS score is below 1% (i.e., EPSS score < 1%), indicating a very low but non-zero probability of exploitation. The vulnerability is not listed in the CISA KEV catalog. Exploitation would likely require a malicious USB device that can send crafted control requests, which normally necessitates physical or remote access to a USB port on the affected system. The CVSS score of 5.5 reflects medium severity based on the potential impact on system stability and warning noise.