« Volver al listado

CVE-2022-50733

Estado: AplazadaSin puntuar—

In the Linux kernel, the following vulnerability has been resolved:

usb: idmouse: fix an uninit-value in idmouse_open

In idmouse_create_image, if any ftip_command fails, it will go to the reset label. However, this leads to the data in bulk_in_buffer[HEADER..IMGSIZE] uninitialized. And the check for valid image incurs an uninitialized dereference.

Fix this by moving the check before reset label since this check only be valid if the data after bulk_in_buffer[HEADER] has concrete data.

Note that this is found by KMSAN, so only kernel compilation is tested.

CVSS

NVD no ha asignado puntuación CVSS a esta CVE (habitual desde el cambio de política de abril de 2026).

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Linux — Linux KernelAI

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2022-50733",
  "cveTags": [],
  "metrics": {},
  "affected": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "affectedData": [
        {
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "product": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4244f72436ab77c3c29a6447af81734ab3925d85",
              "lessThan": "b3304a6df957cc89a0590cb505388d659bf3db4c",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "4244f72436ab77c3c29a6447af81734ab3925d85",
              "lessThan": "7dad42032f68718259590b0cc7654e9a95ff9762",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "4244f72436ab77c3c29a6447af81734ab3925d85",
              "lessThan": "f589b667567fde4f81d6e6c40f42b9f2224690ea",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "4244f72436ab77c3c29a6447af81734ab3925d85",
              "lessThan": "1eae30c0113dde7522088231584d62415011a035",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "4244f72436ab77c3c29a6447af81734ab3925d85",
              "lessThan": "b8bbae3236ab7dccc66c42bc3f7cdbcfc0786e54",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "4244f72436ab77c3c29a6447af81734ab3925d85",
              "lessThan": "20b8c456df584ebb2387dc23d40ebe4ff334417c",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "4244f72436ab77c3c29a6447af81734ab3925d85",
              "lessThan": "6163a5ae097bc78fa26c243fb384537e25610fd7",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "4244f72436ab77c3c29a6447af81734ab3925d85",
              "lessThan": "adad163d1cff248a5df9f7cec50158e6ca89f33b",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "4244f72436ab77c3c29a6447af81734ab3925d85",
              "lessThan": "bce2b0539933e485d22d6f6f076c0fcd6f185c4c",
              "versionType": "git"
            }
          ],
          "programFiles": [
            "drivers/usb/misc/idmouse.c"
          ],
          "defaultStatus": "unaffected"
        },
        {
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "product": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "2.6.13"
            },
            {
              "status": "unaffected",
              "version": "0",
              "lessThan": "2.6.13",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "4.9.331",
              "versionType": "semver",
              "lessThanOrEqual": "4.9.*"
            },
            {
              "status": "unaffected",
              "version": "4.14.296",
              "versionType": "semver",
              "lessThanOrEqual": "4.14.*"
            },
            {
              "status": "unaffected",
              "version": "4.19.262",
              "versionType": "semver",
              "lessThanOrEqual": "4.19.*"
            },
            {
              "status": "unaffected",
              "version": "5.4.220",
              "versionType": "semver",
              "lessThanOrEqual": "5.4.*"
            },
            {
              "status": "unaffected",
              "version": "5.10.150",
              "versionType": "semver",
              "lessThanOrEqual": "5.10.*"
            },
            {
              "status": "unaffected",
              "version": "5.15.75",
              "versionType": "semver",
              "lessThanOrEqual": "5.15.*"
            },
            {
              "status": "unaffected",
              "version": "5.19.17",
              "versionType": "semver",
              "lessThanOrEqual": "5.19.*"
            },
            {
              "status": "unaffected",
              "version": "6.0.3",
              "versionType": "semver",
              "lessThanOrEqual": "6.0.*"
            },
            {
              "status": "unaffected",
              "version": "6.1",
              "versionType": "original_commit_for_fix",
              "lessThanOrEqual": "*"
            }
          ],
          "programFiles": [
            "drivers/usb/misc/idmouse.c"
          ],
          "defaultStatus": "affected"
        }
      ]
    }
  ],
  "published": "2025-12-24T13:15:59.973",
  "references": [
    {
      "url": "https://git.kernel.org/stable/c/1eae30c0113dde7522088231584d62415011a035",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/20b8c456df584ebb2387dc23d40ebe4ff334417c",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/6163a5ae097bc78fa26c243fb384537e25610fd7",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/7dad42032f68718259590b0cc7654e9a95ff9762",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/adad163d1cff248a5df9f7cec50158e6ca89f33b",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/b3304a6df957cc89a0590cb505388d659bf3db4c",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/b8bbae3236ab7dccc66c42bc3f7cdbcfc0786e54",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/bce2b0539933e485d22d6f6f076c0fcd6f185c4c",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/f589b667567fde4f81d6e6c40f42b9f2224690ea",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    }
  ],
  "vulnStatus": "Deferred",
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: idmouse: fix an uninit-value in idmouse_open\n\nIn idmouse_create_image, if any ftip_command fails, it will\ngo to the reset label. However, this leads to the data in\nbulk_in_buffer[HEADER..IMGSIZE] uninitialized. And the check\nfor valid image incurs an uninitialized dereference.\n\nFix this by moving the check before reset label since this\ncheck only be valid if the data after bulk_in_buffer[HEADER]\nhas concrete data.\n\nNote that this is found by KMSAN, so only kernel compilation\nis tested."
    }
  ],
  "lastModified": "2026-06-17T05:24:05.140",
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}