CVE-2022-50733 — Access of Uninitialized Pointer in Linux
Severity
5.5MEDIUM
No vectorEPSS
0.0%
top 84.94%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 24
Description
In the Linux kernel, the following vulnerability has been resolved:
usb: idmouse: fix an uninit-value in idmouse_open
In idmouse_create_image, if any ftip_command fails, it will
go to the reset label. However, this leads to the data in
bulk_in_buffer[HEADER..IMGSIZE] uninitialized. And the check
for valid image incurs an uninitialized dereference.
Fix this by moving the check before reset label since this
check only be valid if the data after bulk_in_buffer[HEADER]
has concrete data.
Note th…
Affected Packages4 packages
▶CVEListV5linux/linux4244f72436ab77c3c29a6447af81734ab3925d85 — b3304a6df957cc89a0590cb505388d659bf3db4c+9
🔴Vulnerability Details
3GHSA▶
GHSA-3qmv-4mq3-fcr8: In the Linux kernel, the following vulnerability has been resolved:
usb: idmouse: fix an uninit-value in idmouse_open
In idmouse_create_image, if an↗2025-12-24
OSV▶
CVE-2022-50733: In the Linux kernel, the following vulnerability has been resolved: usb: idmouse: fix an uninit-value in idmouse_open In idmouse_create_image, if any↗2025-12-24