CVE-2022-50156

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A buffer overflow issue has been identified in the Linux kernel, specifically in the cp2112 xfer() function. The read length variable, which is provided by data->block[0] and comes from user input, can take a value between 0-255. To prevent a buffer overflow in memcpy(), an upper bound has been added to the read length variable. The issue is related to the cp2112 xfer() function in the hid-cp2112.c file, where memcpy() warnings were reported due to the data->block[1] and buf being too small.

Recommendations To resolve the issue, apply the patch that adds an upper bound to the read length variable in the cp2112 xfer() function. As a temporary workaround, consider restricting the use of the cp2112 xfer() function until a patch is available.