CVE-2022-48948

usb: gadget: uvc: Prevent buffer overflow in setup handler

State: Published
Severity: Not scored
Published: Oct 21, 2024
Updated: May 11, 2026
Reserved: Aug 22, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

usb: gadget: uvc: Prevent buffer overflow in setup handler

Setup function uvc_function_setup permits control transfer requests with up to 64 bytes of payload (UVC_MAX_REQUEST_SIZE), data stage handler for OUT transfer uses memcpy to copy req->actual bytes to uvc_event->data.data array of size 60. This may result in an overflow of 4 bytes.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	cdda479f15cd13fa50a913ca85129c0437cc7b91 to before 4972e3528b968665b596b5434764ff8fd9446d35Affected cdda479f15cd13fa50a913ca85129c0437cc7b91 to before 06fd17ee92c8f1704c7e54ec0fd50ae0542a49a5Affected cdda479f15cd13fa50a913ca85129c0437cc7b91 to before bc8380fe5768c564f921f7b4eaba932e330b9e4bAffected cdda479f15cd13fa50a913ca85129c0437cc7b91 to before b8fb1cba934ea122b50f13a4f9d6fc4fdc43d2beAffected cdda479f15cd13fa50a913ca85129c0437cc7b91 to before c79538f32df12887f110dcd6b9c825b482905f24Affected cdda479f15cd13fa50a913ca85129c0437cc7b91 to before 6b41a35b41f77821db24f2d8f66794b390a585c5Affected cdda479f15cd13fa50a913ca85129c0437cc7b91 to before 7b1f773277a72f9756d47a41b94e43506cce1954Affected cdda479f15cd13fa50a913ca85129c0437cc7b91 to before d1a92bb8d697f170d93fe922da763d7d156b8841Affected cdda479f15cd13fa50a913ca85129c0437cc7b91 to before 4c92670b16727365699fe4b19ed32013bab2c107Affected
LinuxLinux	2.6.35Affected before 2.6.35Not affected 4.9.337 through 4.9.Not affected 4.14.303 through 4.14.Not affected 4.19.270 through 4.19.Not affected 5.4.229 through 5.4.Not affected 5.10.161 through 5.10.Not affected 5.15.85 through 5.15.Not affected 6.0.15 through 6.0.Not affected 6.1.1 through 6.1.Not affected 6.2 and laterNot affected

Product

Versions

LinuxLinux

cdda479f15cd13fa50a913ca85129c0437cc7b91 to before 4972e3528b968665b596b5434764ff8fd9446d35Affected
cdda479f15cd13fa50a913ca85129c0437cc7b91 to before 06fd17ee92c8f1704c7e54ec0fd50ae0542a49a5Affected
cdda479f15cd13fa50a913ca85129c0437cc7b91 to before bc8380fe5768c564f921f7b4eaba932e330b9e4bAffected
cdda479f15cd13fa50a913ca85129c0437cc7b91 to before b8fb1cba934ea122b50f13a4f9d6fc4fdc43d2beAffected
cdda479f15cd13fa50a913ca85129c0437cc7b91 to before c79538f32df12887f110dcd6b9c825b482905f24Affected
cdda479f15cd13fa50a913ca85129c0437cc7b91 to before 6b41a35b41f77821db24f2d8f66794b390a585c5Affected
cdda479f15cd13fa50a913ca85129c0437cc7b91 to before 7b1f773277a72f9756d47a41b94e43506cce1954Affected
cdda479f15cd13fa50a913ca85129c0437cc7b91 to before d1a92bb8d697f170d93fe922da763d7d156b8841Affected
cdda479f15cd13fa50a913ca85129c0437cc7b91 to before 4c92670b16727365699fe4b19ed32013bab2c107Affected

LinuxLinux

2.6.35Affected
before 2.6.35Not affected
4.9.337 through 4.9.*Not affected
4.14.303 through 4.14.*Not affected
4.19.270 through 4.19.*Not affected
5.4.229 through 5.4.*Not affected
5.10.161 through 5.10.*Not affected
5.15.85 through 5.15.*Not affected
6.0.15 through 6.0.*Not affected
6.1.1 through 6.1.*Not affected
6.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.