CVE-2022-48948

usb: gadget: uvc: Prevent buffer overflow in setup handler

published October 21, 2024

CVSS
—
EPSS
0%
Percentile
18.2
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

usb: gadget: uvc: Prevent buffer overflow in setup handler

Setup function uvc_function_setup permits control transfer

requests with up to 64 bytes of payload (UVC_MAX_REQUEST_SIZE),

data stage handler for OUT transfer uses memcpy to copy req->actual

bytes to uvc_event->data.data array of size 60. This may result

in an overflow of 4 bytes.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00270 · 18.2th percentile
Published
2024-10-21T20:05Z
EPSS history
Timeline
  • 21 OCT 20:05Z
    usb: gadget: uvc: Prevent buffer overflow in setup handler
    cvelistv5