CVE-2022-49151

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.17.0-rc6-syzkaller-00184-g38f80f42147f

Description A warning in usb submit urb() was reported by Syzbot due to a wrong endpoint type. The issue occurs because the endpoint type is not properly checked. To prevent this warning, the code now checks if the in endpoint is actually present and saves found pipes to struct mcba priv, using them directly instead of making pipes in place.

Recommendations For Linux kernel versions prior to 5.17.0-rc6-syzkaller-00184-g38f80f42147f, update to a newer version that includes the fix for the mcba usb module to properly check endpoint types and prevent warnings in usb submit urb().