usb: gadget: rndis: prevent integer overflow in rndis_set_response() (Linux Linux)
At a glance
- Source
- NVD
- EPSS
- EPSS 0.26 % · percentile 17 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- Linux
- NVD status
- Modified
Description
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: rndis: prevent integer overflow in rndis_set_response() If "BufOffset" is very large the "BufOffset + 8" operation can have an integer overflow.
Weaknesses (CWE)
- CWE-190 — Integer Overflow or Wraparound
References
- https://git.kernel.org/stable/c/8b3e4d26bc9cd0f6373d0095b9ffd99e7da8006b
- https://git.kernel.org/stable/c/c7953cf03a26876d676145ce5d2ae6d8c9630b90
- https://git.kernel.org/stable/c/138d4f739b35dfb40438a0d5d7054965763bfbe7
- https://git.kernel.org/stable/c/21829376268397f9fd2c35cfa9135937b6aa3a1e
- https://git.kernel.org/stable/c/28bc0267399f42f987916a7174e2e32f0833cc65
- https://git.kernel.org/stable/c/56b38e3ca4064041d93c1ca18828c8cedad2e16c
- https://git.kernel.org/stable/c/df7e088d51cdf78b1a0bf1f3d405c2593295c7b0
- https://git.kernel.org/stable/c/65f3324f4b6fed78b8761c3b74615ecf0ffa81fa
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | HIGH 7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | NVD · nvd@nist.gov (Primary) |
European references
- ENISA EUVD · EUVD-2022-53716
- GCVE · GCVE-0-2022-48837
CERT-FR advisories
- CERTFR-2025-AVI-1057 — Multiples vulnérabilités dans les produits VMware · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0800 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0779 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0717 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0693 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
Affected configurations (NVD CPE)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 4.9.302 < 4.9.308cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 4.14.267 < 4.14.273cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 4.19.230 < 4.19.236cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.4.180 < 5.4.187cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.10.101 < 5.10.108cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.15.24 < 5.15.31cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.16.10 < 5.16.17
Affected products
| Product | Versions |
|---|---|
| Linux · Linux | affected ff0a90739925734c91c7e39befe3f4378e0c1369 < 8b3e4d26bc9cd0f6373d0095b9ffd99e7da8006b ; affected 4c22fbcef778badb00fb8bb9f409daa29811c175 < c7953cf03a26876d676145ce5d2ae6d8c9630b90 ; affected db9aaa3026298d652e98f777bc0f5756e2455dda < 138d4f739b35dfb40438a0d5d7054965763bfbe7 ; affected c9e952871ae47af784b4aef0a77db02e557074d6 < 21829376268397f9fd2c35cfa9135937b6aa3a1e ; affected fb4ff0f96de37c44236598e8b53fe43b1df36bf3 < 28bc0267399f42f987916a7174e2e32f0833cc65 ; affected 2da3b0ab54fb7f4d7c5a82757246d0ee33a47197 < 56b38e3ca4064041d93c1ca18828c8cedad2e16c |
| Linux · Linux | affected 4.9.302 < 4.9.308 ; affected 4.14.267 < 4.14.273 ; affected 4.19.230 < 4.19.236 ; affected 5.4.180 < 5.4.187 ; affected 5.10.101 < 5.10.108 ; affected 5.15.24 < 5.15.31 |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |