Lucene search

K
osvGoogleOSV:ASB-A-222023189
HistoryJun 01, 2022 - 12:00 a.m.

Linux kernel vulnerability advisory

2022-06-0100:00:00
Google
osv.dev
10
linux
kernel
vulnerability
composite_setup
composite.c
out of bounds write
local escalation
privilege
usb device
exploitation
software

AI Score

8.2

Confidence

High

EPSS

0.001

Percentile

46.4%

In composite_setup of composite.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege when connecting a malicious USB device with no additional execution privileges needed. User interaction is not needed for exploitation.