CVE-2022-24958: High severity android vulnerability
Published Feb 11, 2022
·Updated
drivers/usb/gadget/legacy/inode.c in the Linux kernel through 5.16.8 mishandles dev->buf release.
Affected Software
38 affected componentsFixes available
Google Android
Linux Linux kernel<5.16.8
Fedoraproject Fedora=34
Fedoraproject Fedora=35
All of the following
NetApp H300s Firmware
NetApp H300s
All of the following
NetApp H500s Firmware
NetApp H500s
All of the following
NetApp H700s Firmware
NetApp H700s
All of the following
NetApp H300e Firmware
NetApp H300e
All of the following
NetApp H500e Firmware
NetApp H500e
All of the following
NetApp H700e Firmware
NetApp H700e
All of the following
NetApp H410s Firmware
NetApp H410s
All of the following
NetApp H410c Firmware
NetApp H410c
Debian Debian Linux=9.0
NetApp H300s Firmware
NetApp H300s
NetApp H500s Firmware
NetApp H500s
NetApp H700s Firmware
NetApp H700s
NetApp H300e Firmware
NetApp H300e
NetApp H500e Firmware
NetApp H500e
NetApp H700e Firmware
NetApp H700e
NetApp H410s Firmware
NetApp H410s
NetApp H410c Firmware
NetApp H410c
debian/linux
5.10.223-15.10.234-16.1.129-16.1.135-16.12.25-1
Remediation
Event History
Feb 11, 2022
CVE Published
via MITRE·04:21 AM
Data Sourced
via MITRE·04:21 AM
Description
Jan 12, 2024
Data Sourced
via Launchpad·12:07 AM
Description
May 6, 2025
Data Sourced
via Ubuntu·04:39 AM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2022-24958?
CVE-2022-24958 is classified as a medium severity vulnerability.
2
How do I fix CVE-2022-24958?
To fix CVE-2022-24958, ensure that your Linux kernel is updated to versions later than 5.16.8.
3
Which systems are affected by CVE-2022-24958?
CVE-2022-24958 affects versions of the Linux kernel up to and including 5.16.8, as well as certain versions of Google Android and Fedora.
4
What kind of vulnerability is CVE-2022-24958?
CVE-2022-24958 is a memory management vulnerability in the Linux kernel related to mishandling device buffer releases.
5
What are the potential impacts of CVE-2022-24958?
The potential impacts of CVE-2022-24958 include denial of service conditions or potential system instability.