CVE-2022-49051

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The aqc111 rx fixup() function in the Linux kernel contains multiple out-of-bounds accesses that can be triggered by a defective or malicious USB device. These issues include the metadata array potentially being out of bounds, leading to out-of-bounds reads and endianness flips on big-endian systems. Additionally, a packet may overlap the metadata array, causing subsequent endianness flips to corrupt data in a cloned SKB (Socket Buffer) already processed by the network stack. Furthermore, a packet SKB can be created with a tail extending far beyond its end, resulting in out-of-bounds heap data being treated as part of the SKB data. This can impact the confidentiality, integrity, and availability of protected information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.