Out-of-Bounds Array Access in Linux Kernel's ISP1760 Driver
Summary
CVE-2022-49551: In the Linux kernel, the following vulnerability has been resolved: usb: isp1760: Fix out-of-bounds array access Running the driver through kasan gives an interesting splat: BUG: KASAN: global-out-of-bounds in isp1760_re... Affects linux versions < 5.18.5-1. Fixed in 5.18.5-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is a core component of many operating systems, providing essential services for hardware and software interaction. The ISP1760 driver is responsible for managing USB host controllers, facilitating communication between USB devices and the operating system. This driver is crucial for ensuring that USB devices function correctly and efficiently. However, a vulnerability has been identified in the ISP1760 driver that can lead to out-of-bounds array access, potentially compromising system stability and security.
Vulnerability Detail
The vulnerability, identified as CVE-2022-49551, arises from an out-of-bounds array access in the ISP1760 driver. This issue occurs during the registration of the driver when it attempts to read regmap fields for different ISP1760 variants. The loop that iterates through these fields assumes that the arrays are sufficiently long, leading to a risk of accessing memory outside the allocated bounds. This can result in unexpected behavior, crashes, or exploitation by malicious actors. The root cause is the dynamic sizing of the arrays, which does not guarantee that they will be long enough to accommodate all expected accesses.
How To Fix
Minimum fixed version
5.18.5-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. The best course of action is to apply the patch by updating to the fixed version of the Linux kernel.
Conclusion
The CVE-2022-49551 vulnerability in the Linux kernel's ISP1760 driver poses significant risks due to out-of-bounds array access. It is crucial for users to update their systems to the patched version to mitigate these risks. Regular monitoring and vulnerability management practices, such as using tools like Vulert, can help maintain system security.
See every vulnerability recorded for linux →
FAQ
CVE-2022-49551 is a vulnerability in the Linux kernel's ISP1760 driver that allows for out-of-bounds array access, potentially leading to system instability.
You can use Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected by this vulnerability.
The risks include system crashes, unexpected behavior, and potential exploitation by attackers, which could compromise system security.
Yes, a patch is available in version 5.18.5-1 of the Linux kernel. Updating to this version will resolve the vulnerability.
If immediate updates are not possible, consider isolating affected systems from untrusted networks and monitoring for unusual behavior until a patch can be applied.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
