CVE-2022-50156

HID: cp2112: prevent a buffer overflow in cp2112_xfer()

State: Published
Severity: 7.8 High
Published: Jun 18, 2025
Updated: Aug 5, 2026
Reserved: Jun 18, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

HID: cp2112: prevent a buffer overflow in cp2112_xfer()

Smatch warnings: drivers/hid/hid-cp2112.c:793 cp2112_xfer() error: __memcpy() 'data->block[1]' too small (33 vs 255) drivers/hid/hid-cp2112.c:793 cp2112_xfer() error: __memcpy() 'buf' too small (64 vs 255)

The 'read_length' variable is provided by 'data->block[0]' which comes from user and it(read_length) can take a value between 0-255. Add an upper bound to 'read_length' variable to prevent a buffer overflow in memcpy().

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	542134c0375b5ca2b1d18490c02b8a20bfdd8d74 to before 3af7d60e9a6c17d6d41c4341f8020511887d372dAffected 542134c0375b5ca2b1d18490c02b8a20bfdd8d74 to before 519ff31a6ddd87aa4905bd9bf3b92e8b88801614Affected 542134c0375b5ca2b1d18490c02b8a20bfdd8d74 to before ebda3d6b004bb6127a66a616524a2de152302ca7Affected 542134c0375b5ca2b1d18490c02b8a20bfdd8d74 to before 8489a20ac481b08c0391608d81ed3796d373cfdfAffected 542134c0375b5ca2b1d18490c02b8a20bfdd8d74 to before e7028944e61014ae915e7fb74963d3835f2f761aAffected 542134c0375b5ca2b1d18490c02b8a20bfdd8d74 to before 26e427ac85c2b8d0d108cc80b6de34d33e2780c4Affected 542134c0375b5ca2b1d18490c02b8a20bfdd8d74 to before 381583845d19cb4bd21c8193449385f3fefa9cafAffected
LinuxLinux	4.15Affected before 4.15Not affected 4.19.256 through 4.19.Not affected 5.4.211 through 5.4.Not affected 5.10.137 through 5.10.Not affected 5.15.61 through 5.15.Not affected 5.18.18 through 5.18.Not affected 5.19.2 through 5.19.Not affected 6.0 and laterNot affected

Product

Versions

LinuxLinux

542134c0375b5ca2b1d18490c02b8a20bfdd8d74 to before 3af7d60e9a6c17d6d41c4341f8020511887d372dAffected
542134c0375b5ca2b1d18490c02b8a20bfdd8d74 to before 519ff31a6ddd87aa4905bd9bf3b92e8b88801614Affected
542134c0375b5ca2b1d18490c02b8a20bfdd8d74 to before ebda3d6b004bb6127a66a616524a2de152302ca7Affected
542134c0375b5ca2b1d18490c02b8a20bfdd8d74 to before 8489a20ac481b08c0391608d81ed3796d373cfdfAffected
542134c0375b5ca2b1d18490c02b8a20bfdd8d74 to before e7028944e61014ae915e7fb74963d3835f2f761aAffected
542134c0375b5ca2b1d18490c02b8a20bfdd8d74 to before 26e427ac85c2b8d0d108cc80b6de34d33e2780c4Affected
542134c0375b5ca2b1d18490c02b8a20bfdd8d74 to before 381583845d19cb4bd21c8193449385f3fefa9cafAffected

LinuxLinux

4.15Affected
before 4.15Not affected
4.19.256 through 4.19.*Not affected
5.4.211 through 5.4.*Not affected
5.10.137 through 5.10.*Not affected
5.15.61 through 5.15.*Not affected
5.18.18 through 5.18.*Not affected
5.19.2 through 5.19.*Not affected
6.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.