← Database

CVE-2022-25258

MEDIUM CVSS: 4.6 Published: 2022-02-16 Modified: 2026-06-17

Description

An issue was discovered in drivers/usb/gadget/composite.c in the Linux kernel before 5.16.10. The USB Gadget subsystem lacks certain validation of interface OS descriptor requests (ones with a large array index and ones associated with NULL function pointer retrieval). Memory corruption might occur.

Affected Platforms

Netapp H410SNetapp H410CFedoraproject FedoraNetapp H300S FirmwareNetapp H300SDebian Debian LinuxNetapp H500SNetapp H700S FirmwareNetapp H410S FirmwareNetapp H410C Firmware

Weakness Type

CWE-476

References