Riskcovery

CVE-2022-48837

usb: gadget: rndis: prevent integer overflow in rndis_set_response()

State
Published
Severity
Not scored
Published
Jul 16, 2024
Updated
May 11, 2026
Reserved
Jul 16, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

usb: gadget: rndis: prevent integer overflow in rndis_set_response()

If "BufOffset" is very large the "BufOffset + 8" operation can have an integer overflow.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • ff0a90739925734c91c7e39befe3f4378e0c1369 to before 8b3e4d26bc9cd0f6373d0095b9ffd99e7da8006bAffected
  • 4c22fbcef778badb00fb8bb9f409daa29811c175 to before c7953cf03a26876d676145ce5d2ae6d8c9630b90Affected
  • db9aaa3026298d652e98f777bc0f5756e2455dda to before 138d4f739b35dfb40438a0d5d7054965763bfbe7Affected
  • c9e952871ae47af784b4aef0a77db02e557074d6 to before 21829376268397f9fd2c35cfa9135937b6aa3a1eAffected
  • fb4ff0f96de37c44236598e8b53fe43b1df36bf3 to before 28bc0267399f42f987916a7174e2e32f0833cc65Affected
  • 2da3b0ab54fb7f4d7c5a82757246d0ee33a47197 to before 56b38e3ca4064041d93c1ca18828c8cedad2e16cAffected
  • 2724ebafda0a8df08a9cb91557d33226bee80f7b to before df7e088d51cdf78b1a0bf1f3d405c2593295c7b0Affected
  • 38ea1eac7d88072bbffb630e2b3db83ca649b826 to before 65f3324f4b6fed78b8761c3b74615ecf0ffa81faAffected
LinuxLinux
  • 4.9.302 to before 4.9.308Affected
  • 4.14.267 to before 4.14.273Affected
  • 4.19.230 to before 4.19.236Affected
  • 5.4.180 to before 5.4.187Affected
  • 5.10.101 to before 5.10.108Affected
  • 5.15.24 to before 5.15.31Affected
  • 5.16.10 to before 5.16.17Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.