01 Record

CVE-2022-48837

usb: gadget: rndis: prevent integer overflow in rndis_set_response()

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

usb: gadget: rndis: prevent integer overflow in rndis_set_response()

03 Exploitation and scoring

Exploitation

Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.

SSVC decision

ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
Technical ImpactpartialSuccessful exploitation gives limited control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

0.26% probability of exploitation activity in the next 30 days.

EPSS percentile

Ranks above 17.1% of scored records. A rank, not a probability.

NVD base score

7.8 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD analysis status

Modified. NVD last modified this record on 2026-06-17.

Red Hat severity

Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2024-07-16 12:25Z2 YR AGO

Last updated

2026-05-11 18:48Z3 MO AGO

Reserved

2024-07-16

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-190Integer Overflow or WraparoundBase

Data version

5.2

Document digest

04bf36420703f3d477cd8eb35bbe6e77e6df643d39578b21c4629a0b47d44c53

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxff0a90739925734c91c7e39befe3f4378e0c1369 to < 8b3e4d26bc9cd0f6373d0095b9ffd99e7da8006b, 4c22fbcef778badb00fb8bb9f409daa29811c175 to < c7953cf03a26876d676145ce5d2ae6d8c9630b90, db9aaa3026298d652e98f777bc0f5756e2455dda to < 138d4f739b35dfb40438a0d5d7054965763bfbe7, c9e952871ae47af784b4aef0a77db02e557074d6 to < 21829376268397f9fd2c35cfa9135937b6aa3a1e, fb4ff0f96de37c44236598e8b53fe43b1df36bf3 to < 28bc0267399f42f987916a7174e2e32f0833cc65, 2da3b0ab54fb7f4d7c5a82757246d0ee33a47197 to < 56b38e3ca4064041d93c1ca18828c8cedad2e16c, 2724ebafda0a8df08a9cb91557d33226bee80f7b to < df7e088d51cdf78b1a0bf1f3d405c2593295c7b0, 38ea1eac7d88072bbffb630e2b3db83ca649b826 to < 65f3324f4b6fed78b8761c3b74615ecf0ffa81fa, 4.9.302 to < 4.9.308, 4.14.267 to < 4.14.273, 4.19.230 to < 4.19.236, 5.4.180 to < 5.4.187, 5.10.101 to < 5.10.108, 5.15.24 to < 5.15.31, 5.16.10 to < 5.16.17—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/8b3e4d26bc9cd0f6373d0095b9ffd99e7da8006b
git.kernel.orghttps://git.kernel.org/stable/c/c7953cf03a26876d676145ce5d2ae6d8c9630b90
git.kernel.orghttps://git.kernel.org/stable/c/138d4f739b35dfb40438a0d5d7054965763bfbe7
git.kernel.orghttps://git.kernel.org/stable/c/21829376268397f9fd2c35cfa9135937b6aa3a1e
git.kernel.orghttps://git.kernel.org/stable/c/28bc0267399f42f987916a7174e2e32f0833cc65
git.kernel.orghttps://git.kernel.org/stable/c/56b38e3ca4064041d93c1ca18828c8cedad2e16c
git.kernel.orghttps://git.kernel.org/stable/c/df7e088d51cdf78b1a0bf1f3d405c2593295c7b0
git.kernel.orghttps://git.kernel.org/stable/c/65f3324f4b6fed78b8761c3b74615ecf0ffa81fa

01 Record index

CVE-2022-48837

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2022-48837

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References