CVE-2022-3577
An out-of-bounds memory write flaw was found in the Linux kernel’s Kid-friendly Wired Controller driver. This flaw allows a local user to crash or pot...
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
An out-of-bounds memory write flaw was found in the Linux kernel’s Kid-friendly Wired Controller driver. This flaw allows a local user to crash or potentially escalate their privileges on the system. It is in bigben_probe of drivers/hid/hid-bigbenff.c. The reason is incorrect assumption - bigben devices all have inputs. However, malicious devices can break this assumption, leaking to out-of-bound write.
ディストリビューション別の修正状況
各ディストリビューションが公開している、この CVE の修正パッケージ
- Debian DEBIAN-CVE-2022-3577 linux 修正版: 5.10.127-1
- Ubuntu UBUNTU-CVE-2022-3577 linux-hwe-edge
参照URL
- advisory github.com
- advisory nvd.nist.gov
- web git.kernel.org
- web git.kernel.org
- web git.kernel.org