CVE-2022-48836
Linux Aiptek USB Endpoint Type Disclosure
Description
In the Linux kernel, the following vulnerability has been resolved: Input: aiptek - properly check endpoint type Syzbot reported warning in usb_submit_urb() which is caused by wrong endpoint type. There was a check for the number of endpoints, but not for the type of endpoint. Fix it by replacing old desc.bNumEndpoints check with usb_find_common_endpoints() helper for finding endpoints Fail log: usb 5-1: BOGUS urb xfer, pipe 1 != type 3 WARNING: CPU: 2 PID: 48 at drivers/usb/core/urb.c:502 usb_submit_urb+0xed2/0x18a0 drivers/usb/core/urb.c:502 Modules linked in: CPU: 2 PID: 48 Comm: kworker/2:2 Not tainted 5.17.0-rc6-syzkaller-00226-g07ebd38a0da2 #0 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 Workqueue: usb_hub_wq hub_event ... Call Trace: <TASK> aiptek_open+0xd5/0x130 drivers/input/tablet/aiptek.c:830 input_open_device+0x1bb/0x320 drivers/input/input.c:629 kbd_connect+0xfe/0x160 drivers/tty/vt/keyboard.c:1593
INFO
Published Date :
July 16, 2024, 1:15 p.m.
Last Modified :
Nov. 21, 2024, 7:34 a.m.
Source :
416baaa9-dc9f-4396-8d5f-8c081fb06d67
Remotely Exploitable :
No
Impact Score :
3.6
Exploitability Score :
1.8
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2022-48836.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2022-48836 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2022-48836 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
CVE Modified by af854a3a-2127-422b-91ae-364da2661108
Nov. 21, 2024
Action Type Old Value New Value Added Reference https://git.kernel.org/stable/c/35069e654bcab567ff8b9f0e68e1caf82c15dcd7 Added Reference https://git.kernel.org/stable/c/5600f6986628dde8881734090588474f54a540a8 Added Reference https://git.kernel.org/stable/c/57277a8b5d881e02051ba9d7f6cb3f915c229821 Added Reference https://git.kernel.org/stable/c/6de20111cd0bb7da9b2294073ba00c7d2a6c1c4f Added Reference https://git.kernel.org/stable/c/e732b0412f8c603d1e998f3bff41b5e7d5c3914c Added Reference https://git.kernel.org/stable/c/e762f57ff255af28236cd02ca9fc5c7e5a089d31 Added Reference https://git.kernel.org/stable/c/f0d43d22d24182b94d7eb78a2bf6ae7e2b33204a Added Reference https://git.kernel.org/stable/c/fc8033a55e2796d21e370260a784ac9fbb8305a6 -
Initial Analysis by [email protected]
Jul. 24, 2024
Action Type Old Value New Value Added CVSS V3.1 NIST AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Changed Reference Type https://git.kernel.org/stable/c/35069e654bcab567ff8b9f0e68e1caf82c15dcd7 No Types Assigned https://git.kernel.org/stable/c/35069e654bcab567ff8b9f0e68e1caf82c15dcd7 Patch Changed Reference Type https://git.kernel.org/stable/c/5600f6986628dde8881734090588474f54a540a8 No Types Assigned https://git.kernel.org/stable/c/5600f6986628dde8881734090588474f54a540a8 Patch Changed Reference Type https://git.kernel.org/stable/c/57277a8b5d881e02051ba9d7f6cb3f915c229821 No Types Assigned https://git.kernel.org/stable/c/57277a8b5d881e02051ba9d7f6cb3f915c229821 Patch Changed Reference Type https://git.kernel.org/stable/c/6de20111cd0bb7da9b2294073ba00c7d2a6c1c4f No Types Assigned https://git.kernel.org/stable/c/6de20111cd0bb7da9b2294073ba00c7d2a6c1c4f Patch Changed Reference Type https://git.kernel.org/stable/c/e732b0412f8c603d1e998f3bff41b5e7d5c3914c No Types Assigned https://git.kernel.org/stable/c/e732b0412f8c603d1e998f3bff41b5e7d5c3914c Patch Changed Reference Type https://git.kernel.org/stable/c/e762f57ff255af28236cd02ca9fc5c7e5a089d31 No Types Assigned https://git.kernel.org/stable/c/e762f57ff255af28236cd02ca9fc5c7e5a089d31 Patch Changed Reference Type https://git.kernel.org/stable/c/f0d43d22d24182b94d7eb78a2bf6ae7e2b33204a No Types Assigned https://git.kernel.org/stable/c/f0d43d22d24182b94d7eb78a2bf6ae7e2b33204a Patch Changed Reference Type https://git.kernel.org/stable/c/fc8033a55e2796d21e370260a784ac9fbb8305a6 No Types Assigned https://git.kernel.org/stable/c/fc8033a55e2796d21e370260a784ac9fbb8305a6 Patch Added CWE NIST NVD-CWE-noinfo Added CPE Configuration OR *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 4.4 up to (excluding) 4.9.308 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 4.10 up to (excluding) 4.14.273 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 4.15 up to (excluding) 4.19.236 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 4.20 up to (excluding) 5.4.187 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.5 up to (excluding) 5.10.108 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.11 up to (excluding) 5.15.31 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.16 up to (excluding) 5.16.17 -
CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Jul. 16, 2024
Action Type Old Value New Value Added Description In the Linux kernel, the following vulnerability has been resolved: Input: aiptek - properly check endpoint type Syzbot reported warning in usb_submit_urb() which is caused by wrong endpoint type. There was a check for the number of endpoints, but not for the type of endpoint. Fix it by replacing old desc.bNumEndpoints check with usb_find_common_endpoints() helper for finding endpoints Fail log: usb 5-1: BOGUS urb xfer, pipe 1 != type 3 WARNING: CPU: 2 PID: 48 at drivers/usb/core/urb.c:502 usb_submit_urb+0xed2/0x18a0 drivers/usb/core/urb.c:502 Modules linked in: CPU: 2 PID: 48 Comm: kworker/2:2 Not tainted 5.17.0-rc6-syzkaller-00226-g07ebd38a0da2 #0 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 Workqueue: usb_hub_wq hub_event ... Call Trace: <TASK> aiptek_open+0xd5/0x130 drivers/input/tablet/aiptek.c:830 input_open_device+0x1bb/0x320 drivers/input/input.c:629 kbd_connect+0xfe/0x160 drivers/tty/vt/keyboard.c:1593 Added Reference kernel.org https://git.kernel.org/stable/c/57277a8b5d881e02051ba9d7f6cb3f915c229821 [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/fc8033a55e2796d21e370260a784ac9fbb8305a6 [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/6de20111cd0bb7da9b2294073ba00c7d2a6c1c4f [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/e732b0412f8c603d1e998f3bff41b5e7d5c3914c [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/f0d43d22d24182b94d7eb78a2bf6ae7e2b33204a [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/e762f57ff255af28236cd02ca9fc5c7e5a089d31 [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/35069e654bcab567ff8b9f0e68e1caf82c15dcd7 [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/5600f6986628dde8881734090588474f54a540a8 [No types assigned]
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2022-48836 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2022-48836
weaknesses.