CVE-2022-27223: Out-of-bounds Read
Published Mar 15, 2022
·Updated
In drivers/usb/gadget/udc/udc-xilinx.c in the Linux kernel before 5.16.12, the endpoint index is not validated and might be manipulated by the host for out-of-array access.
Affected Software
39 affected componentsFixes available
Linux Linux kernel>=3.18<4.9.304
Linux Linux kernel>=4.10<4.14.269
Linux Linux kernel>=4.15<4.19.232
Linux Linux kernel>=4.20<5.4.182
Linux Linux kernel>=5.5<5.10.103
Linux Linux kernel>=5.11<5.15.26
Linux Linux kernel>=5.16<5.16.12
NetApp Active Iq Unified Manager Vsphere
All of the following
NetApp H500s Firmware
NetApp H500s
All of the following
NetApp H700s Firmware
NetApp H700s
All of the following
NetApp H300e Firmware
NetApp H300e
All of the following
NetApp H500e Firmware
NetApp H500e
All of the following
NetApp H700e Firmware
NetApp H700e
All of the following
NetApp H410s Firmware
NetApp H410s
All of the following
NetApp H300s Firmware
NetApp H300s
Debian Debian Linux=9.0
Linux Linux kernel<5.16.12
NetApp H500s Firmware
NetApp H500s
NetApp H700s Firmware
NetApp H700s
NetApp H300e Firmware
NetApp H300e
NetApp H500e Firmware
NetApp H500e
NetApp H700e Firmware
NetApp H700e
NetApp H410s Firmware
NetApp H410s
NetApp H300s Firmware
NetApp H300s
debian/linux
5.10.223-15.10.234-16.1.129-16.1.135-16.12.25-1
Remediation
Event History
Mar 15, 2022
CVE Published
via MITRE·11:51 PM
Data Sourced
via MITRE·11:51 PM
Description
Jan 12, 2024
Data Sourced
via Launchpad·12:07 AM
Description
May 6, 2025
Data Sourced
via Ubuntu·04:38 AM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2022-27223?
CVE-2022-27223 is considered a potential security vulnerability due to an endpoint index being unvalidated.
2
How do I fix CVE-2022-27223?
To fix CVE-2022-27223, it is recommended to upgrade to Linux kernel version 5.16.12 or a later version.
3
What systems are affected by CVE-2022-27223?
CVE-2022-27223 affects various versions of the Linux kernel prior to 5.16.12.
4
Is CVE-2022-27223 exploitable remotely?
Yes, CVE-2022-27223 can potentially be exploited by attackers with host access.
5
What impact does CVE-2022-27223 have on system security?
CVE-2022-27223 can lead to out-of-array access, which could compromise system integrity and availability.