CVE-2022-50733
Description
In the Linux kernel, the following vulnerability has been resolved: usb: idmouse: fix an uninit-value in idmouse_open In idmouse_create_image, if any ftip_command fails, it will go to the reset label. However, this leads to the data in bulk_in_buffer[HEADER..IMGSIZE] uninitialized. And the check for valid image incurs an uninitialized dereference. Fix this by moving the check before reset label since this check only be valid if the data after bulk_in_buffer[HEADER] has concrete data. Note that this is found by KMSAN, so only kernel compilation is tested.
How to fix
- Linux Linuxb3304a6df957cc89a0590cb505388d659bf3db4c, 7dad42032f68718259590b0cc7654e9a95ff9762, f589b667567fde4f81d6e6c40f42b9f2224690ea, 1eae30c0113dde7522088231584d62415011a035, b8bbae3236ab7dccc66c42bc3f7cdbcfc0786e54, 20b8c456df584ebb2387dc23d40ebe4ff334417c, 6163a5ae097bc78fa26c243fb384537e25610fd7, adad163d1cff248a5df9f7cec50158e6ca89f33b, bce2b0539933e485d22d6f6f076c0fcd6f185c4c or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 4244f72436ab77c3c29a6447af81734ab3925d85 ≤ v < b3304a6df957cc89a0590cb505388d659bf3db4c, 4244f72436ab77c3c29a6447af81734ab3925d85 ≤ v < 7dad42032f68718259590b0cc7654e9a95ff9762, 4244f72436ab77c3c29a6447af81734ab3925d85 ≤ v < f589b667567fde4f81d6e6c40f42b9f2224690ea, 4244f72436ab77c3c29a6447af81734ab3925d85 ≤ v < 1eae30c0113dde7522088231584d62415011a035, 4244f72436ab77c3c29a6447af81734ab3925d85 ≤ v < b8bbae3236ab7dccc66c42bc3f7cdbcfc0786e54, 4244f72436ab77c3c29a6447af81734ab3925d85 ≤ v < 20b8c456df584ebb2387dc23d40ebe4ff334417c, 4244f72436ab77c3c29a6447af81734ab3925d85 ≤ v < 6163a5ae097bc78fa26c243fb384537e25610fd7, 4244f72436ab77c3c29a6447af81734ab3925d85 ≤ v < adad163d1cff248a5df9f7cec50158e6ca89f33b, 4244f72436ab77c3c29a6447af81734ab3925d85 ≤ v < bce2b0539933e485d22d6f6f076c0fcd6f185c4c, 2.6.13 | b3304a6df957cc89a0590cb505388d659bf3db4c, 7dad42032f68718259590b0cc7654e9a95ff9762, f589b667567fde4f81d6e6c40f42b9f2224690ea, 1eae30c0113dde7522088231584d62415011a035, b8bbae3236ab7dccc66c42bc3f7cdbcfc0786e54, 20b8c456df584ebb2387dc23d40ebe4ff334417c, 6163a5ae097bc78fa26c243fb384537e25610fd7, adad163d1cff248a5df9f7cec50158e6ca89f33b, bce2b0539933e485d22d6f6f076c0fcd6f185c4c |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.