CVE-2022-48837

usb: gadget: rndis: prevent integer overflow in rndis_set_response()

published July 16, 2024

CVSS
—
EPSS
0%
Percentile
16.4
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

usb: gadget: rndis: prevent integer overflow in rndis_set_response()

If "BufOffset" is very large the "BufOffset + 8" operation can have an

integer overflow.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00257 · 16.4th percentile
Published
2024-07-16T12:25Z
EPSS history
Timeline
  • 16 JUL 12:25Z
    usb: gadget: rndis: prevent integer overflow in rndis_set_response()
    cvelistv5