usb: idmouse: fix an uninit-value in idmouse_open (Linux Linux)
At a glance
- Source
- NVD
- EPSS
- EPSS 0.28 % · percentile 21 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- Linux
- NVD status
- Deferred
Description
In the Linux kernel, the following vulnerability has been resolved: usb: idmouse: fix an uninit-value in idmouse_open In idmouse_create_image, if any ftip_command fails, it will go to the reset label. However, this leads to the data in bulk_in_buffer[HEADER..IMGSIZE] uninitialized. And the check for valid image incurs an uninitialized dereference. Fix this by moving the check before reset label since this check only be valid if the data after bulk_in_buffer[HEADER] has concrete data. Note that this is found by KMSAN, so only kernel compilation is tested.
References
- https://git.kernel.org/stable/c/b3304a6df957cc89a0590cb505388d659bf3db4c
- https://git.kernel.org/stable/c/7dad42032f68718259590b0cc7654e9a95ff9762
- https://git.kernel.org/stable/c/f589b667567fde4f81d6e6c40f42b9f2224690ea
- https://git.kernel.org/stable/c/1eae30c0113dde7522088231584d62415011a035
- https://git.kernel.org/stable/c/b8bbae3236ab7dccc66c42bc3f7cdbcfc0786e54
- https://git.kernel.org/stable/c/20b8c456df584ebb2387dc23d40ebe4ff334417c
- https://git.kernel.org/stable/c/6163a5ae097bc78fa26c243fb384537e25610fd7
- https://git.kernel.org/stable/c/adad163d1cff248a5df9f7cec50158e6ca89f33b
- https://git.kernel.org/stable/c/bce2b0539933e485d22d6f6f076c0fcd6f185c4c
European references
- ENISA EUVD · EUVD-2022-55756
- GCVE · GCVE-0-2022-50733
CERT-FR advisories
- CERTFR-2026-AVI-0225 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0170 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0128 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0108 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
Affected products
| Product | Versions |
|---|---|
| Linux · Linux | affected 4244f72436ab77c3c29a6447af81734ab3925d85 < b3304a6df957cc89a0590cb505388d659bf3db4c ; affected 4244f72436ab77c3c29a6447af81734ab3925d85 < 7dad42032f68718259590b0cc7654e9a95ff9762 ; affected 4244f72436ab77c3c29a6447af81734ab3925d85 < f589b667567fde4f81d6e6c40f42b9f2224690ea ; affected 4244f72436ab77c3c29a6447af81734ab3925d85 < 1eae30c0113dde7522088231584d62415011a035 ; affected 4244f72436ab77c3c29a6447af81734ab3925d85 < b8bbae3236ab7dccc66c42bc3f7cdbcfc0786e54 ; affected 4244f72436ab77c3c29a6447af81734ab3925d85 < 20b8c456df584ebb2387dc23d40ebe4ff334417c |
| Linux · Linux | affected 2.6.13 ; unaffected 0 < 2.6.13 ; unaffected 4.9.331 ≤ 4.9.* ; unaffected 4.14.296 ≤ 4.14.* ; unaffected 4.19.262 ≤ 4.19.* ; unaffected 5.4.220 ≤ 5.4.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |