NetSight
IP …
high7.8

CVE-2022-24958

drivers/usb/gadget/legacy/inode.c in the Linux kernel through 5.16.8 mishandles dev->buf release.

Impact

drivers/usb/gadget/legacy/inode.c in the Linux kernel through 5.16.8 mishandles dev->buf release.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 4.9.305
from 4.10 before 4.14.270
from 4.15 before 4.19.233
from 4.20 before 5.4.183
from 5.5 before 5.10.104
from 5.11 before 5.15.27
FedoraprojectFedora
Versions 34, 35
NetappH300s Firmware
All versions
NetappH500s Firmware
All versions
NetappH700s Firmware
All versions
NetappH300e Firmware
All versions
NetappH500e Firmware
All versions
NetappH700e Firmware
All versions
NetappH410s Firmware
All versions
NetappH410c Firmware
All versions
DebianDebian Linux
Version 9.0

Weakness classification

CWE-763

References