CVE-2022-48866
published 2024-07-16CVE-2022-48866: In the Linux kernel, the following vulnerability has been resolved: HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts Syzbot reported an…
PriorityP430high7.1CVSS 3.1
AVLACLPRLUINSUCHINAH
EPSS
0.27%
18.9th percentile
In the Linux kernel, the following vulnerability has been resolved:
HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts
Syzbot reported an slab-out-of-bounds Read in thrustmaster_probe() bug.
The root case is in missing validation check of actual number of endpoints.
Code should not blindly access usb_host_interface::endpoint array, since
it may contain less endpoints than code expects.
Fix it by adding missing validaion check and print an error if
number of endpoints do not match expected number
Affected
10 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 5.16.18-1 (bookworm) | linux 5.16.18-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= c49c33637802a2c6957a78119eb8be3b055dd9e9 < 3ffbe85cda7f523dad896bae08cecd8db8b555ab | 3ffbe85cda7f523dad896bae08cecd8db8b555ab |
| linux | linux | >= c49c33637802a2c6957a78119eb8be3b055dd9e9 < 56185434e1e50acecee56d8f5850135009b87947 | 56185434e1e50acecee56d8f5850135009b87947 |
| linux | linux | >= c49c33637802a2c6957a78119eb8be3b055dd9e9 < fc3ef2e3297b3c0e2006b5d7b3d66965e3392036 | fc3ef2e3297b3c0e2006b5d7b3d66965e3392036 |
| linux | linux_kernel | >= 0 < 5.16.18-1 | 5.16.18-1 |
| linux | linux_kernel | >= 0 < 5.16.18-1 | 5.16.18-1 |
| linux | linux_kernel | >= 0 < 5.16.18-1 | 5.16.18-1 |
| linux | linux_kernel | >= 5.13 < 5.15.29 | 5.15.29 |
| linux | linux_kernel | >= 5.16 < 5.16.15 | 5.16.15 |
CVSS provenance
nvdv3.17.1HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
osv7.1HIGH
vendor_debian7.1HIGH
vendor_redhat7.1HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
CVE-2022-48866: In the Linux kernel, the following vulnerability has been resolved: HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts Syzbot reported an
osv·2024-07-16·CVSS 7.1
CVE-2022-48866 [HIGH] CVE-2022-48866: In the Linux kernel, the following vulnerability has been resolved: HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts Syzbot reported an
In the Linux kernel, the following vulnerability has been resolved: HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts Syzbot reported an slab-out-of-bounds Read in thrustmaster_probe() bug. The root case is in missing validation check of actual number of endpoints. Code should not blindly access usb_host_interface::endpoint array, since it may contain less endpoints than code expects. Fix it by adding missing validaion check and print an error if number of endpoints do not match expected number
GHSA
GHSA-2mxj-r96x-vpcm: In the Linux kernel, the following vulnerability has been resolved:
HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts
Syzbot reported a
ghsa_unreviewed·2024-07-16
CVE-2022-48866 [HIGH] CWE-125 GHSA-2mxj-r96x-vpcm: In the Linux kernel, the following vulnerability has been resolved:
HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts
Syzbot reported a
In the Linux kernel, the following vulnerability has been resolved:
HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts
Syzbot reported an slab-out-of-bounds Read in thrustmaster_probe() bug.
The root case is in missing validation check of actual number of endpoints.
Code should not blindly access usb_host_interface::endpoint array, since
it may contain less endpoints than code expects.
Fix it by adding missing validaion check and print an error if
number of endpoints do not match expected number
Red Hat
kernel: HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts
vendor_redhat·2024-07-16·CVSS 7.1
CVE-2022-48866 [HIGH] CWE-125 kernel: HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts
kernel: HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts
In the Linux kernel, the following vulnerability has been resolved:
HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts
Syzbot reported an slab-out-of-bounds Read in thrustmaster_probe() bug.
The root case is in missing validation check of actual number of endpoints.
Code should not blindly access usb_host_interface::endpoint array, since
it may contain less endpoints than code expects.
Fix it by adding missing validaion check and print an error if
number of endpoints do not match expected number
A vulnerability was found in the thrustmaster_interrupts function in the Linux kernel's HID Thrustmaster driver. This issue arises from a lack of validation for the actual number of endpoints, leading to a slab-out
Debian
CVE-2022-48866: linux - In the Linux kernel, the following vulnerability has been resolved: HID: hid-th...
vendor_debian·2022·CVSS 7.1
CVE-2022-48866 [HIGH] CVE-2022-48866: linux - In the Linux kernel, the following vulnerability has been resolved: HID: hid-th...
In the Linux kernel, the following vulnerability has been resolved: HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts Syzbot reported an slab-out-of-bounds Read in thrustmaster_probe() bug. The root case is in missing validation check of actual number of endpoints. Code should not blindly access usb_host_interface::endpoint array, since it may contain less endpoints than code expects. Fix it by adding missing validaion check and print an error if number of endpoints do not match expected number
Scope: local
bookworm: resolved (fixed in 5.16.18-1)
bullseye: resolved
forky: resolved (fixed in 5.16.18-1)
sid: resolved (fixed in 5.16.18-1)
trixie: resolved (fixed in 5.16.18-1)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://git.kernel.org/stable/c/3ffbe85cda7f523dad896bae08cecd8db8b555abhttps://git.kernel.org/stable/c/56185434e1e50acecee56d8f5850135009b87947https://git.kernel.org/stable/c/fc3ef2e3297b3c0e2006b5d7b3d66965e3392036https://git.kernel.org/stable/c/3ffbe85cda7f523dad896bae08cecd8db8b555abhttps://git.kernel.org/stable/c/56185434e1e50acecee56d8f5850135009b87947https://git.kernel.org/stable/c/fc3ef2e3297b3c0e2006b5d7b3d66965e3392036
2024-07-16
Published