< Back

CVE-2022-48836

Updated on 16 Jul 2024

Severity

5.5 Medium severity

Details

CVSS score: 5.5
CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Affected product
Affected component
Links: NIST CIRCL RHEL Ubuntu

Overview

About vulnerability

In the Linux kernel, the following vulnerability has been resolved:

Input: aiptek - properly check endpoint type

Syzbot reported warning in usb_submit_urb() which is caused by wrong endpoint type. There was a check for the number of endpoints, but not for the type of endpoint.

Fix it by replacing old desc.bNumEndpoints check with usb_find_common_endpoints() helper for finding endpoints

Fail log:

usb 5-1: BOGUS urb xfer, pipe 1 != type 3 WARNING: CPU: 2 PID: 48 at drivers/usb/core/urb.c:502 usb_submit_urb+0xed2/0x18a0 drivers/usb/core/urb.c:502 Modules linked in: CPU: 2 PID: 48 Comm: kworker/2:2 Not tainted 5.17.0-rc6-syzkaller-00226-g07ebd38a0da2 #0 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 Workqueue: usb_hub_wq hub_event … Call Trace: aiptek_open+0xd5/0x130 drivers/input/tablet/aiptek.c:830 input_open_device+0x1bb/0x320 drivers/input/input.c:629 kbd_connect+0xfe/0x160 drivers/tty/vt/keyboard.c:1593

Details

Affected product:: AlmaLinux 9.2 ESU , Amazon Linux 2 ELS , CentOS 6 ELS , CentOS 7 ELS , CentOS 8.4 ELS , CentOS 8.5 ELS , CentOS Stream 8 ELS , CloudLinux 6 ELS , CloudLinux 7 ELS , Debian 10 ELS , Oracle Linux 6 ELS , Oracle Linux 7 ELS , TuxCare 9.6 ESU , Ubuntu 16.04 ELS , Ubuntu 18.04 ELS , Ubuntu 20.04 ELS
Affected packages:: linux @ 4.19.0 (+17 more)

Fixes

Operating system / Project

KernelCare state

Live-patch status from KernelCare for each operating system.

Operating system	Status	Covered kernels
AlmaLinux 8	Released	43 kernels 4.18.0-240.15.1.el8_3 4.18.0-240.22.1.el8_3 4.18.0-240.el8 4.18.0-305.10.2.el8_4 4.18.0-305.12.1.el8_4 4.18.0-305.17.1.el8_4 4.18.0-305.19.1.el8_4 4.18.0-305.25.1.el8_4 4.18.0-305.3.1.el8_4 4.18.0-305.7.1.el8_4 4.18.0-305.el8 4.18.0-348.12.2.el8_5 4.18.0-348.2.1.el8_5 4.18.0-348.20.1.el8_5 4.18.0-348.23.1.el8_5 4.18.0-348.7.1.el8_5 4.18.0-348.el8 4.18.0-372.13.1.el8_6 4.18.0-372.16.1.el8_6 4.18.0-372.19.1.el8_6 4.18.0-372.26.1.el8_6 4.18.0-372.32.1.el8_6 4.18.0-372.9.1.el8 4.18.0-425.10.1.el8_7 4.18.0-425.13.1.el8_7 4.18.0-425.19.2.el8_7 4.18.0-425.3.1.el8 4.18.0-477.10.1.el8_8 4.18.0-477.13.1.el8_8 4.18.0-477.15.1.el8_8 4.18.0-477.21.1.el8_8 4.18.0-477.27.1.el8_8 4.18.0-477.27.2.el8_8 4.18.0-513.11.1.el8_9 4.18.0-513.18.1.el8_9 4.18.0-513.18.2.el8_9 4.18.0-513.24.1.el8_9 4.18.0-513.5.1.el8_9 4.18.0-513.9.1.el8_9 4.18.0-553.16.1.el8_10 4.18.0-553.5.1.el8_10 4.18.0-553.8.1.el8_10 4.18.0-553.el8_10
CentOS 8	Released	33 kernels 4.18.0-147.0.3.el8_1 4.18.0-147.3.1.el8_1 4.18.0-147.5.1.el8_1 4.18.0-147.8.1.el8_1 4.18.0-147.el8 4.18.0-193.1.2.el8_2 4.18.0-193.14.2.el8_2 4.18.0-193.19.1.el8_2 4.18.0-193.28.1.el8_2 4.18.0-193.6.3.el8_2 4.18.0-193.el8 4.18.0-240.1.1.el8_3 4.18.0-240.10.1.el8_3 4.18.0-240.15.1.el8_3 4.18.0-240.22.1.el8_3 4.18.0-240.el8 4.18.0-305.10.2.el8_4 4.18.0-305.12.1.el8_4 4.18.0-305.17.1.el8_4 4.18.0-305.19.1.el8_4 4.18.0-305.25.1.el8_4 4.18.0-305.3.1.el8 4.18.0-305.7.1.el8_4 4.18.0-348.2.1.el8_5 4.18.0-348.7.1.el8_5 4.18.0-348.el8 4.18.0-80.1.2.el8_0 4.18.0-80.11.1.el8_0 4.18.0-80.11.2.el8_0 4.18.0-80.4.2.el8_0 4.18.0-80.7.1.el8_0 4.18.0-80.7.2.el8_0 4.18.0-80.el8
CloudLinux OS 7h	Released	60 kernels 4.18.0-147.0.3.el7h.lve 4.18.0-147.0.3.el7h 4.18.0-147.3.1.el7h.lve.1 4.18.0-147.8.1.el7h.lve.1 4.18.0-147.8.1.el7h.lve 4.18.0-193.28.1.lve1.el7h 4.18.0-305.10.2.2.lve.el7h 4.18.0-305.10.2.lve.el7h 4.18.0-305.12.1.lve.el7h 4.18.0-305.17.1.lve.el7h 4.18.0-305.19.1.lve.el7h 4.18.0-305.7.1.lve.el7h 4.18.0-305.lve.el7h 4.18.0-348.12.2.lve.1.el7h 4.18.0-348.12.2.lve.2.el7h 4.18.0-348.12.2.lve.el7h 4.18.0-348.20.1.lve.1.el7h 4.18.0-348.20.1.lve.el7h 4.18.0-348.23.1.lve.el7h 4.18.0-348.7.1.lve.el7h 4.18.0-348.lve.el7h 4.18.0-372.13.1.lve.el7h 4.18.0-372.16.1.lve.el7h 4.18.0-372.19.1.lve.el7h 4.18.0-372.26.1.lve.1.el7h 4.18.0-372.32.1.lve.el7h 4.18.0-372.9.1.lve.el7h 4.18.0-425.10.1.lve.el7h 4.18.0-425.13.1.lve.el7h 4.18.0-425.19.2.lve.el7h 4.18.0-425.3.1.lve.1.el7h 4.18.0-425.3.1.lve.2.el7h 4.18.0-425.3.1.lve.3.el7h 4.18.0-425.3.1.lve.el7h 4.18.0-477.10.1.lve.1.el7h 4.18.0-477.13.1.lve.1.el7h 4.18.0-477.13.1.lve.el7h 4.18.0-477.15.1.lve.1.el7h 4.18.0-477.15.1.lve.2.el7h 4.18.0-477.21.1.lve.1.el7h 4.18.0-477.21.1.lve.el7h 4.18.0-477.27.1.lve.el7h 4.18.0-477.27.2.lve.el7h 4.18.0-513.11.1.lve.1.el7h 4.18.0-513.11.1.lve.el7h 4.18.0-513.18.1.lve.1.el7h 4.18.0-513.18.1.lve.2.el7h 4.18.0-513.18.1.lve.el7h 4.18.0-513.24.1.lve.1.el7h 4.18.0-513.24.1.lve.2.el7h 4.18.0-513.24.1.lve.el7h 4.18.0-513.5.1.lve.el7h 4.18.0-513.9.1.lve.el7h 4.18.0-553.16.1.lve.1.el7h 4.18.0-553.16.1.lve.el7h 4.18.0-553.5.1.lve.1.el7h 4.18.0-553.5.1.lve.el7h 4.18.0-553.8.1.lve.el7h 4.18.0-553.lve.el7h 4.18.0-80.7.2.el7h
CloudLinux OS 8	Released	56 kernels 4.18.0-147.0.3.lve.el8 4.18.0-147.3.1.el8.lve.1 4.18.0-147.8.1.el8.lve.1 4.18.0-147.8.1.el8.lve 4.18.0-193.28.1.lve1.el8 4.18.0-305.10.2.2.lve.el8 4.18.0-305.10.2.lve.el8 4.18.0-305.12.1.lve.el8 4.18.0-305.17.1.lve.el8 4.18.0-305.19.1.lve.el8 4.18.0-305.7.1.lve.el8 4.18.0-305.lve.el8 4.18.0-348.12.2.lve.el8 4.18.0-348.20.1.lve.1.el8 4.18.0-348.20.1.lve.el8 4.18.0-348.23.1.lve.el8 4.18.0-348.7.1.lve.el8 4.18.0-348.lve.el8 4.18.0-372.13.1.lve.el8 4.18.0-372.16.1.lve.el8 4.18.0-372.19.1.lve.el8 4.18.0-372.26.1.lve.1.el8 4.18.0-372.32.1.lve.el8 4.18.0-372.9.1.1.lve.el8 4.18.0-372.9.1.lve.el8 4.18.0-425.10.1.lve.el8 4.18.0-425.13.1.lve.el8 4.18.0-425.19.2.lve.el8 4.18.0-425.3.1.lve.1.el8 4.18.0-425.3.1.lve.2.el8 4.18.0-425.3.1.lve.3.el8 4.18.0-425.3.1.lve.el8 4.18.0-477.10.1.lve.el8 4.18.0-477.13.1.lve.1.el8 4.18.0-477.13.1.lve.el8 4.18.0-477.15.1.lve.2.el8 4.18.0-477.21.1.lve.1.el8 4.18.0-477.21.1.lve.el8 4.18.0-477.27.1.lve.el8 4.18.0-477.27.2.lve.el8 4.18.0-513.11.1.lve.el8 4.18.0-513.18.1.lve.1.el8 4.18.0-513.18.1.lve.2.el8 4.18.0-513.18.1.lve.el8 4.18.0-513.24.1.lve.1.el8 4.18.0-513.24.1.lve.2.el8 4.18.0-513.24.1.lve.el8 4.18.0-513.5.1.lve.el8 4.18.0-513.9.1.lve.el8 4.18.0-544.lve.el8 4.18.0-553.16.1.lve.1.el8 4.18.0-553.16.1.lve.el8 4.18.0-553.5.1.lve.1.el8 4.18.0-553.5.1.lve.el8 4.18.0-553.8.1.lve.el8 4.18.0-553.lve.el8
Oracle Linux 8	Released	68 kernels 4.18.0-147.0.3.el8_1 4.18.0-147.3.1.el8_1 4.18.0-147.5.1.el8_1 4.18.0-147.8.1.el8_1 4.18.0-147.el8 4.18.0-193.1.2.el8_2 4.18.0-193.13.2.el8_2 4.18.0-193.14.3.el8_2 4.18.0-193.19.1.el8_2 4.18.0-193.28.1.el8_2 4.18.0-193.6.3.el8_2 4.18.0-193.el8 4.18.0-240.1.1.el8_3 4.18.0-240.10.1.el8_3 4.18.0-240.15.1.el8_3 4.18.0-240.22.1.el8_3 4.18.0-240.8.1.el8_3 4.18.0-240.el8 4.18.0-305.10.2.el8_4 4.18.0-305.12.1.el8_4 4.18.0-305.17.1.el8_4 4.18.0-305.19.1.el8_4 4.18.0-305.25.1.el8_4 4.18.0-305.3.1.el8_4 4.18.0-305.7.1.el8_4 4.18.0-305.el8 4.18.0-348.12.2.el8_5 4.18.0-348.2.1.el8_5 4.18.0-348.20.1.el8_5 4.18.0-348.23.1.el8_5 4.18.0-348.7.1.el8_5 4.18.0-348.el8 4.18.0-372.13.1.0.1.el8_6 4.18.0-372.16.1.0.1.el8_6 4.18.0-372.19.1.0.1.el8_6 4.18.0-372.26.1.0.1.el8_6 4.18.0-372.32.1.0.1.el8_6 4.18.0-372.9.1.el8 4.18.0-425.10.1.el8_7 4.18.0-425.13.1.el8_7 4.18.0-425.19.2.el8_7 4.18.0-425.3.1.el8 4.18.0-477.10.1.el8_8 4.18.0-477.13.1.el8_8 4.18.0-477.15.1.el8_8 4.18.0-477.21.1.el8_8 4.18.0-477.27.0.1.el8_8 4.18.0-477.27.1.el8_8 4.18.0-513.11.0.1.el8_9 4.18.0-513.18.0.1.el8_9 4.18.0-513.18.0.2.el8_9 4.18.0-513.18.1.0.1.el8_9 4.18.0-513.18.1.el8_9 4.18.0-513.24.1.el8_9 4.18.0-513.5.1.el8_9 4.18.0-513.9.1.el8_9 4.18.0-553.16.1.el8_10 4.18.0-553.5.1.el8_10 4.18.0-553.8.1.el8_10 4.18.0-553.el8_10 4.18.0-80.1.2.el8_0 4.18.0-80.11.1.el8_0 4.18.0-80.11.2.el8_0 4.18.0-80.4.2.el8_0 4.18.0-80.7.1.el8_0 4.18.0-80.7.2.el8_0 4.18.0-80.el8 4.18.0-147.0.2.el8_1
RHEL 8	Released	64 kernels 4.18.0-147.0.2.el8_1 4.18.0-147.0.3.el8_1 4.18.0-147.3.1.el8_1 4.18.0-147.5.1.el8_1 4.18.0-147.8.1.el8_1 4.18.0-147.el8 4.18.0-193.1.2.el8_2 4.18.0-193.13.2.el8_2 4.18.0-193.14.3.el8_2 4.18.0-193.19.1.el8_2 4.18.0-193.28.1.el8_2 4.18.0-193.6.3.el8_2 4.18.0-193.el8 4.18.0-240.1.1.el8_3 4.18.0-240.10.1.el8_3 4.18.0-240.15.1.el8_3 4.18.0-240.22.1.el8_3 4.18.0-240.8.1.el8_3 4.18.0-240.el8 4.18.0-305.10.2.el8_4 4.18.0-305.12.1.el8_4 4.18.0-305.17.1.el8_4 4.18.0-305.19.1.el8_4 4.18.0-305.25.1.el8_4 4.18.0-305.3.1.el8_4 4.18.0-305.7.1.el8_4 4.18.0-305.el8 4.18.0-348.12.2.el8_5 4.18.0-348.2.1.el8_5 4.18.0-348.20.1.el8_5 4.18.0-348.23.1.el8_5 4.18.0-348.7.1.el8_5 4.18.0-348.el8 4.18.0-372.13.1.el8_6 4.18.0-372.16.1.el8_6 4.18.0-372.19.1.el8_6 4.18.0-372.26.1.el8_6 4.18.0-372.32.1.el8_6 4.18.0-372.9.1.el8 4.18.0-425.10.1.el8_7 4.18.0-425.13.1.el8_7 4.18.0-425.19.2.el8_7 4.18.0-425.3.1.el8 4.18.0-477.10.1.el8_8 4.18.0-477.13.1.el8_8 4.18.0-477.15.1.el8_8 4.18.0-477.21.1.el8_8 4.18.0-477.27.1.el8_8 4.18.0-513.11.1.el8_9 4.18.0-513.18.1.el8_9 4.18.0-513.24.1.el8_9 4.18.0-513.5.1.el8_9 4.18.0-513.9.1.el8_9 4.18.0-553.16.1.el8_10 4.18.0-553.5.1.el8_10 4.18.0-553.8.1.el8_10 4.18.0-553.el8_10 4.18.0-80.1.2.el8_0 4.18.0-80.11.1.el8_0 4.18.0-80.11.2.el8_0 4.18.0-80.4.2.el8_0 4.18.0-80.7.1.el8_0 4.18.0-80.7.2.el8_0 4.18.0-80.el8
Rocky Linux 8	Released	38 kernels 4.18.0-305.10.2.el8_4 4.18.0-305.12.1.el8_4 4.18.0-305.17.1.el8_4 4.18.0-305.19.1.el8_4 4.18.0-305.25.1.el8_4 4.18.0-305.3.1.el8_4 4.18.0-305.7.1.el8_4 4.18.0-348.12.2.el8_5 4.18.0-348.2.1.el8_5 4.18.0-348.20.1.el8_5 4.18.0-348.23.1.el8_5 4.18.0-348.7.1.el8_5 4.18.0-372.13.1.el8_6 4.18.0-372.16.1.el8_6.0.1 4.18.0-372.16.1.el8_6 4.18.0-372.19.1.el8_6 4.18.0-372.26.1.el8_6 4.18.0-372.32.1.el8_6 4.18.0-372.9.1.el8 4.18.0-425.10.1.el8_7 4.18.0-425.13.1.el8_7 4.18.0-425.19.2.el8_7 4.18.0-425.3.1.el8 4.18.0-477.10.1.el8_8 4.18.0-477.13.1.el8_8 4.18.0-477.15.1.el8_8 4.18.0-477.21.1.el8_8 4.18.0-477.27.1.el8_8 4.18.0-513.11.1.el8_9.0.1 4.18.0-513.11.1.el8_9 4.18.0-513.18.1.el8_9 4.18.0-513.24.1.el8_9 4.18.0-513.5.1.el8_9 4.18.0-513.9.1.el8_9 4.18.0-553.16.1.el8_10 4.18.0-553.5.1.el8_10 4.18.0-553.8.1.el8_10 4.18.0-553.el8_10
Ubuntu 14.04 HWE ESM	Will Not Fix	—
Ubuntu 16.04 AWS ESM	Will Not Fix	—
Ubuntu 16.04 ESM	Will Not Fix	—

Release info

Copy page link

Open as a page

Advisory

CLSA-2025:1748945064

Operating system

CentOS 8.4 ELS

Published date

Nov 16, 2014

Project

Linux

Version

2.11.0-1~ubuntu16.04.1+tuxcare.els12

How to fix

Update command:

apt-get update
apt-get --only-upgrade install ansible*

Changelog

Insufficiently Random Passwords Leakage
Debian/patches/CVE-2020-10729.patch: Fix caching of Jinja2 expressions to prevent caching dynamic results
CVE-2020-10729

Updated packages

ansible_2.5.1+dfsg-1ubuntu0.1+tuxcare.els6_all.deb

CVE-2022-48836

Severity

Details

Overview

About vulnerability

Details

Statement

Fixes

Statement

KernelCare state

Subscribe to updates

Unsubscribe

Contact us

Message Delivered!