CVE-2022-48836
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2022
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
Input: aiptek - properly check endpoint type
In the Linux kernel, the following vulnerability has been resolved: Input: aiptek - properly check endpoint type Syzbot reported warning in usb_submit_urb() which is caused by wrong endpoint type. There was a check for the number of endpoints, but not for the type of endpoint. Fix it by replacing old desc.bNumEndpoints check with usb_find_common_endpoints() helper for finding endpoints Fail log: usb 5-1: BOGUS urb xfer, pipe 1 != type 3 WARNING: CPU: 2 PID: 48 at drivers/usb/core/urb.c:502 usb_submit_urb+0xed2/0x18a0 drivers/usb/core/urb.c:502 Modules linked in: CPU: 2 PID: 48 Comm: kworker/2:2 Not tainted 5.17.0-rc6-syzkaller-00226-g07ebd38a0da2 #0 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 Workqueue: usb_hub_wq hub_event ... Call Trace: <TASK> aiptek_open+0xd5/0x130 drivers/input/tablet/aiptek.c:830 input_open_device+0x1bb/0x320 drivers/input/input.c:629 kbd_connect+0xfe/0x160 drivers/tty/vt/keyboard.c:1593
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 8e20cf2bce122ce9262d6034ee5d5b76fbb92f96 | affected | git | 57277a8b5d881e02051ba9d7f6cb3f915c229821 | Unavailable | None listed |
| 8e20cf2bce122ce9262d6034ee5d5b76fbb92f96 | affected | git | fc8033a55e2796d21e370260a784ac9fbb8305a6 | Unavailable | None listed |
| 8e20cf2bce122ce9262d6034ee5d5b76fbb92f96 | affected | git | 6de20111cd0bb7da9b2294073ba00c7d2a6c1c4f | Unavailable | None listed |
| 8e20cf2bce122ce9262d6034ee5d5b76fbb92f96 | affected | git | e732b0412f8c603d1e998f3bff41b5e7d5c3914c | Unavailable | None listed |
| 8e20cf2bce122ce9262d6034ee5d5b76fbb92f96 | affected | git | f0d43d22d24182b94d7eb78a2bf6ae7e2b33204a | Unavailable | None listed |
| 8e20cf2bce122ce9262d6034ee5d5b76fbb92f96 | affected | git | e762f57ff255af28236cd02ca9fc5c7e5a089d31 | Unavailable | None listed |
| 8e20cf2bce122ce9262d6034ee5d5b76fbb92f96 | affected | git | 35069e654bcab567ff8b9f0e68e1caf82c15dcd7 | Unavailable | None listed |
| 8e20cf2bce122ce9262d6034ee5d5b76fbb92f96 | affected | git | 5600f6986628dde8881734090588474f54a540a8 | Unavailable | None listed |
| 90eb3c037fe3f0f25f01713a92725a8daa2b41f3 | affected | git | Unavailable | Unavailable | None listed |
| a7c0ba06670f99c252d5bb74258dddbf50fef837 | affected | git | Unavailable | Unavailable | None listed |
| 3.2.79 | affected | semver | 3.3 | Unavailable | None listed |
| 3.12.53 | affected | semver | 3.13 | Unavailable | None listed |
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
affected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 4.4 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0 | unaffected | semver | 4.4 | Unavailable | None listed |
| 4.9.308 | unaffected | semver | Unavailable | 4.9.* | None listed |
| 4.14.273 | unaffected | semver | Unavailable | 4.14.* | None listed |
| 4.19.236 | unaffected | semver | Unavailable | 4.19.* | None listed |
| 5.4.187 | unaffected | semver | Unavailable | 5.4.* | None listed |
| 5.10.108 | unaffected | semver | Unavailable | 5.10.* | None listed |
| 5.15.31 | unaffected | semver | Unavailable | 5.15.* | None listed |
| 5.16.17 | unaffected | semver | Unavailable | 5.16.* | None listed |
| 5.17 | unaffected | original_commit_for_fix | Unavailable | * | None listed |