PT-2025-26082 · Linux+3 · Linux Kernel+3
Published
2022-06-09
·
Updated
2025-11-25
·
CVE-2022-50156
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A buffer overflow issue has been identified in the Linux kernel, specifically in the cp2112 xfer() function. The
read length variable, which is provided by data->block[0] and comes from user input, can take a value between 0-255. To prevent a buffer overflow in memcpy(), an upper bound has been added to the read length variable. The issue is related to the cp2112 xfer() function in the hid-cp2112.c file, where memcpy() warnings were reported due to the data->block[1] and buf being too small.Recommendations
To resolve the issue, apply the patch that adds an upper bound to the
read length variable in the cp2112 xfer() function.
As a temporary workaround, consider restricting the use of the cp2112 xfer() function until a patch is available.Exploit
Fix
Memory Corruption
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Astra Linux
Linux Kernel
Red Hat
Suse