CVE-2022-27223: Out-of-bounds Read
In drivers/usb/gadget/udc/udc-xilinx.c in the Linux kernel before 5.16.12, the endpoint index is not validated and might be manipulated by the host for out-of-array access.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1 - Upgrade
Upgrade
Linux kernelto a version that resolves this vulnerability.Fixed in 5.16.12
Event History
Frequently Asked Questions
What is the severity of CVE-2022-27223?
CVE-2022-27223 is considered a potential security vulnerability due to an endpoint index being unvalidated.
How do I fix CVE-2022-27223?
To fix CVE-2022-27223, it is recommended to upgrade to Linux kernel version 5.16.12 or a later version.
What systems are affected by CVE-2022-27223?
CVE-2022-27223 affects various versions of the Linux kernel prior to 5.16.12.
Is CVE-2022-27223 exploitable remotely?
Yes, CVE-2022-27223 can potentially be exploited by attackers with host access.
What impact does CVE-2022-27223 have on system security?
CVE-2022-27223 can lead to out-of-array access, which could compromise system integrity and availability.