CVE-2022-48837

Published: Jul 16, 2024Modified: Jun 17, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: rndis: prevent integer overflow in rndis_set_response() If "BufOffset" is very large the "BufOffset + 8" operation can have an integer overflow.

Affected (7)

Products: Linux: Linux Kernel

1 product

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	4.14.267 ≤ version < 4.14.273
Linux Linux Kernel	4.19.230 ≤ version < 4.19.236
Linux Linux Kernel	4.9.302 ≤ version < 4.9.308
Linux Linux Kernel	5.10.101 ≤ version < 5.10.108
Linux Linux Kernel	5.15.24 ≤ version < 5.15.31
Linux Linux Kernel	5.16.10 ≤ version < 5.16.17
Linux Linux Kernel	5.4.180 ≤ version < 5.4.187

Related CWEs

Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

References (16)

https://git.kernel.org/stable/c/138d4f739b35dfb40438a0d5d7054965763bfbe7

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Mailing ListPatch

https://git.kernel.org/stable/c/21829376268397f9fd2c35cfa9135937b6aa3a1e

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Mailing ListPatch

https://git.kernel.org/stable/c/28bc0267399f42f987916a7174e2e32f0833cc65

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Mailing ListPatch

https://git.kernel.org/stable/c/56b38e3ca4064041d93c1ca18828c8cedad2e16c

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Mailing ListPatch

https://git.kernel.org/stable/c/65f3324f4b6fed78b8761c3b74615ecf0ffa81fa

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Mailing ListPatch

https://git.kernel.org/stable/c/8b3e4d26bc9cd0f6373d0095b9ffd99e7da8006b

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Mailing ListPatch

https://git.kernel.org/stable/c/c7953cf03a26876d676145ce5d2ae6d8c9630b90

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Mailing ListPatch

https://git.kernel.org/stable/c/df7e088d51cdf78b1a0bf1f3d405c2593295c7b0

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Mailing ListPatch

https://git.kernel.org/stable/c/138d4f739b35dfb40438a0d5d7054965763bfbe7

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListPatch

https://git.kernel.org/stable/c/21829376268397f9fd2c35cfa9135937b6aa3a1e

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListPatch

https://git.kernel.org/stable/c/28bc0267399f42f987916a7174e2e32f0833cc65

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListPatch

https://git.kernel.org/stable/c/56b38e3ca4064041d93c1ca18828c8cedad2e16c

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListPatch

https://git.kernel.org/stable/c/65f3324f4b6fed78b8761c3b74615ecf0ffa81fa

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListPatch

https://git.kernel.org/stable/c/8b3e4d26bc9cd0f6373d0095b9ffd99e7da8006b

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListPatch

https://git.kernel.org/stable/c/c7953cf03a26876d676145ce5d2ae6d8c9630b90

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListPatch

https://git.kernel.org/stable/c/df7e088d51cdf78b1a0bf1f3d405c2593295c7b0

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListPatch

Timeline

No history available yet.