CVE - CVE-2022-48836

CVE-ID
CVE-2022-48836	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: Input: aiptek - properly check endpoint type Syzbot reported warning in usb_submit_urb() which is caused by wrong endpoint type. There was a check for the number of endpoints, but not for the type of endpoint. Fix it by replacing old desc.bNumEndpoints check with usb_find_common_endpoints() helper for finding endpoints Fail log: usb 5-1: BOGUS urb xfer, pipe 1 != type 3 WARNING: CPU: 2 PID: 48 at drivers/usb/core/urb.c:502 usb_submit_urb+0xed2/0x18a0 drivers/usb/core/urb.c:502 Modules linked in: CPU: 2 PID: 48 Comm: kworker/2:2 Not tainted 5.17.0-rc6-syzkaller-00226-g07ebd38a0da2 #0 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 Workqueue: usb_hub_wq hub_event ... Call Trace: <TASK> aiptek_open+0xd5/0x130 drivers/input/tablet/aiptek.c:830 input_open_device+0x1bb/0x320 drivers/input/input.c:629 kbd_connect+0xfe/0x160 drivers/tty/vt/keyboard.c:1593
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/35069e654bcab567ff8b9f0e68e1caf82c15dcd7 URL:https://git.kernel.org/stable/c/35069e654bcab567ff8b9f0e68e1caf82c15dcd7 MISC:https://git.kernel.org/stable/c/5600f6986628dde8881734090588474f54a540a8 URL:https://git.kernel.org/stable/c/5600f6986628dde8881734090588474f54a540a8 MISC:https://git.kernel.org/stable/c/57277a8b5d881e02051ba9d7f6cb3f915c229821 URL:https://git.kernel.org/stable/c/57277a8b5d881e02051ba9d7f6cb3f915c229821 MISC:https://git.kernel.org/stable/c/6de20111cd0bb7da9b2294073ba00c7d2a6c1c4f URL:https://git.kernel.org/stable/c/6de20111cd0bb7da9b2294073ba00c7d2a6c1c4f MISC:https://git.kernel.org/stable/c/e732b0412f8c603d1e998f3bff41b5e7d5c3914c URL:https://git.kernel.org/stable/c/e732b0412f8c603d1e998f3bff41b5e7d5c3914c MISC:https://git.kernel.org/stable/c/e762f57ff255af28236cd02ca9fc5c7e5a089d31 URL:https://git.kernel.org/stable/c/e762f57ff255af28236cd02ca9fc5c7e5a089d31 MISC:https://git.kernel.org/stable/c/f0d43d22d24182b94d7eb78a2bf6ae7e2b33204a URL:https://git.kernel.org/stable/c/f0d43d22d24182b94d7eb78a2bf6ae7e2b33204a MISC:https://git.kernel.org/stable/c/fc8033a55e2796d21e370260a784ac9fbb8305a6 URL:https://git.kernel.org/stable/c/fc8033a55e2796d21e370260a784ac9fbb8305a6
Assigning CNA
kernel.org
Date Record Created
20240716	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240716)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)