Use-After-Free Vulnerability in Linux Kernel USB Gadget Driver
Summary
CVE-2022-49980: In the Linux kernel, the following vulnerability has been resolved: USB: gadget: Fix use-after-free Read in usb_udc_uevent() The syzbot fuzzer found a race between uevent callbacks and gadget driver unregistration that c... Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is a core component of many operating systems, providing essential services for hardware and software interaction. The USB gadget driver is responsible for managing USB devices in a flexible manner, allowing various types of USB devices to be implemented in software. This vulnerability arises from a race condition during the unregistration of gadget drivers, which can lead to critical security issues.
Vulnerability Detail
The vulnerability, identified as CVE-2022-49980, is a use-after-free bug in the usb_udc_uevent function within the Linux kernel's USB gadget driver. It originates from a race condition between uevent callbacks and the unregistration of the gadget driver. If the driver is unbound while uevent processing is ongoing, the driver structure may be accessed after it has been deallocated, potentially leading to arbitrary code execution or system crashes.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. It is recommended to apply the patch as soon as it is available.
Conclusion
CVE-2022-49980 represents a significant vulnerability in the Linux kernel's USB gadget driver, stemming from a race condition that can lead to serious security implications. It is crucial to update to the patched version to safeguard your system against potential exploits.
See every vulnerability recorded for linux →
FAQ
CVE-2022-49980 is a use-after-free vulnerability in the Linux kernel's USB gadget driver, which can lead to security risks due to improper handling of driver unregistration.
If exploited, this vulnerability could allow an attacker to execute arbitrary code or crash the system, compromising its integrity and availability.
The vulnerability affects various versions of the Linux kernel, specifically those prior to the patched versions 6.0.2-1 for Debian 12 and 13.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without needing to sign up.
Currently, there are no specific workarounds available. It is advisable to apply the patch as soon as it is released.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
