ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2022-27223

—
CVSS 3.1
8.8 high
EPSS
2%p81
Published
()
Modified
Description

In drivers/usb/gadget/udc/udc-xilinx.c in the Linux kernel before 5.16.12, the endpoint index is not validated and might be manipulated by the host for out-of-array access.

Vendors
linuxnetappdebian
Products
linux kernel, active iq unified manager, h500s firmware, h700s firmware, h300e firmware, h500e firmware, h700e firmware, h410s firmware, h300s firmware, debian linux
Weakness
CWE-129
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (2.2%)

In the news

No ingested article mentions this CVE yet.