CVE-2022-48836

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.17.0-rc6-syzkaller-00226-g07ebd38a0da2

Description The issue is related to a wrong endpoint type in the usb submit urb() function, which can cause a warning. The problem arises because there was a check for the number of endpoints but not for the type of endpoint. This can lead to a denial of service. The usb find common endpoints() helper is used to fix the issue by properly checking endpoint types.

Recommendations To resolve the issue, update the Linux kernel to a version that includes the fix for the wrong endpoint type check in the usb submit urb() function. Specifically, update to a version later than 5.17.0-rc6-syzkaller-00226-g07ebd38a0da2. As a temporary workaround, consider disabling the aiptek open() function until a patch is available.