CVE-2022-3577
An out-of-bounds memory write flaw was found in the Linux kernel’s Kid-friendly Wired Controller driver. This flaw allows a local user to crash or pot...
Original description
The description as published by the source.
An out-of-bounds memory write flaw was found in the Linux kernel’s Kid-friendly Wired Controller driver. This flaw allows a local user to crash or potentially escalate their privileges on the system. It is in bigben_probe of drivers/hid/hid-bigbenff.c. The reason is incorrect assumption - bigben devices all have inputs. However, malicious devices can break this assumption, leaking to out-of-bound write.
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2022-3577 linux Fixed in: 5.10.127-1
- Ubuntu UBUNTU-CVE-2022-3577 linux-hwe-edge
References
- advisory github.com
- advisory nvd.nist.gov
- web git.kernel.org
- web git.kernel.org
- web git.kernel.org