NetSight
IP …
high7.8

CVE-2022-3577

An out-of-bounds memory write flaw was found in the Linux kernel’s Kid-friendly Wired Controller driver.

Impact

An out-of-bounds memory write flaw was found in the Linux kernel’s Kid-friendly Wired Controller driver. This flaw allows a local user to crash or potentially escalate their privileges on the system. It is in bigben_probe of drivers/hid/hid-bigbenff.c. The reason is incorrect assumption - bigben devices all have inputs. However, malicious devices can break this assumption, leaking to out-of-bound write.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.20 before 5.4.198
from 5.5 before 5.10.121
from 5.11 before 5.15.46
from 5.16 before 5.17.14
from 5.18 before 5.18.3
Version 5.19

Weakness classification

CWE-401CWE-787

References