Executive Summary

Informations
Name CVE-2022-48834 First vendor Publication 2024-07-16
Vendor Cve Last vendor Modification 2024-11-21

Security-Database Scoring CVSS v3

Cvss vector : CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Overall CVSS Score 7.8
Base Score 7.8 Environmental Score 7.8
impact SubScore 5.9 Temporal Score 7.8
Exploitabality Sub Score 1.8
 
Attack Vector Local Attack Complexity Low
Privileges Required Low User Interaction None
Scope Unchanged Confidentiality Impact High
Integrity Impact High Availability Impact High
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector :
Cvss Base Score N/A Attack Range N/A
Cvss Impact Score N/A Attack Complexity N/A
Cvss Expoit Score N/A Authentication N/A
Calculate full CVSS 2.0 Vectors scores

Detail

In the Linux kernel, the following vulnerability has been resolved:

usb: usbtmc: Fix bug in pipe direction for control transfers

The syzbot fuzzer reported a minor bug in the usbtmc driver:

usb 5-1: BOGUS control dir, pipe 80001e80 doesn't match bRequestType 0 WARNING: CPU: 0 PID: 3813 at drivers/usb/core/urb.c:412 usb_submit_urb+0x13a5/0x1970 drivers/usb/core/urb.c:410 Modules linked in: CPU: 0 PID: 3813 Comm: syz-executor122 Not tainted 5.17.0-rc5-syzkaller-00306-g2293be58d6a1 #0 ... Call Trace:

usb_start_wait_urb+0x113/0x530 drivers/usb/core/message.c:58
usb_internal_control_msg drivers/usb/core/message.c:102 [inline]
usb_control_msg+0x2a5/0x4b0 drivers/usb/core/message.c:153
usbtmc_ioctl_request drivers/usb/class/usbtmc.c:1947 [inline]

The problem is that usbtmc_ioctl_request() uses usb_rcvctrlpipe() for all of its transfers, whether they are in or out. It's easy to fix.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48834

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 7
Os 3483

Sources (Detail)

https://git.kernel.org/stable/c/10a805334a11acd547602d6c4cf540a0f6ab5c6e
https://git.kernel.org/stable/c/5f6a2d63c68c12cf61259df7c3527a0e05dce952
https://git.kernel.org/stable/c/700a0715854c1e79a73341724ce4f5bb01abc016
https://git.kernel.org/stable/c/c69aef9db878ab277068a8cc1b4bf0cf309dc2b7
https://git.kernel.org/stable/c/e9b667a82cdcfe21d590344447d65daed52b353b
Source Url

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
Date Informations
2025-01-08 02:47:17
  • Multiple Updates
2025-01-07 02:46:54
  • Multiple Updates
2024-12-25 02:45:41
  • Multiple Updates
2024-12-12 02:48:33
  • Multiple Updates
2024-11-25 09:23:49
  • Multiple Updates
2024-11-21 21:22:31
  • Multiple Updates
2024-11-14 02:43:16
  • Multiple Updates
2024-11-09 02:43:55
  • Multiple Updates
2024-10-26 02:41:41
  • Multiple Updates
2024-10-25 02:43:26
  • Multiple Updates
2024-10-23 02:42:50
  • Multiple Updates
2024-10-03 02:38:54
  • Multiple Updates
2024-10-02 02:37:18
  • Multiple Updates
2024-09-04 02:36:40
  • Multiple Updates
2024-08-22 02:35:02
  • Multiple Updates
2024-08-02 13:43:18
  • Multiple Updates
2024-08-02 01:31:18
  • Multiple Updates
2024-07-20 00:27:24
  • Multiple Updates
2024-07-16 17:27:24
  • First insertion