GSD-2023-1000857 usb: gadget: uvc: Prevent buffer overflow in setup handler

usb: gadget: uvc: Prevent buffer overflow in setup handler This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.15 by commit...

GSD-2023-1000199 usb: gadget: uvc: Prevent buffer overflow in setup handler

usb: gadget: uvc: Prevent buffer overflow in setup handler This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.161 by commit...

GSD-2023-1000111 usb: gadget: uvc: Prevent buffer overflow in setup handler

usb: gadget: uvc: Prevent buffer overflow in setup handler This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.85 by commit...

GSD-2023-1000004 usb: gadget: uvc: Prevent buffer overflow in setup handler

usb: gadget: uvc: Prevent buffer overflow in setup handler This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.15 by commit...

PT-2023-33081 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.15 Description: The issue is related to a buffer overflow in the setup handler of the USB gadget UVC driver. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2023-34305 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.85 Description: The issue is related to a buffer overflow in the setup handler of the USB gadget UVC driver. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2023-33276 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 2.6.35 through 5.10.160 Description: A buffer overflow issue exists in the setup handler of the UVC gadget. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2023-33188 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.85 Description: The issue is related to a buffer overflow in the setup handler of the UVC gadget. It was introduced in version v2.6.35 and fixed in version v5.15.85. The actual impact and attack plausibili...

PT-2024-11819

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A buffer overflow issue has been identified in the Linux kernel's USB gadget UVC setup handler. The setup function uvc function setup allows control transfer requests with up to 64 bytes...

GSD-2022-1006970 usb: gadget: uvc: fix sg handling during video encode

usb: gadget: uvc: fix sg handling during video encode This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.77 by commit...

GSD-2022-1006917 usb: gadget: uvc: Fix argument to sizeof() in uvc_register_video()

usb: gadget: uvc: Fix argument to sizeof in uvcregistervideo This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...

GSD-2022-1006668 usb: gadget: uvc: fix sg handling during video encode

usb: gadget: uvc: fix sg handling during video encode This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.7 by commit...

PT-2022-35073 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: A memory leak issue was discovered in the uvc gpio parse function of the uvcvideo media module. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2022-35172 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue is related to the uvc register video function in the Linux Kernel. It involves a potential problem with the argument to sizeof. The actual impact and attack plausibility have not ye...

PT-2022-35328

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.75 Description A memory leak issue was discovered in the uvc gpio parse function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-34923

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.7 Description The issue is related to the handling of sg during video encode in the uvc gadget of the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations For Lin...

PT-2022-35225

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.77 Description The issue is related to the handling of sg during video encode in the uvc gadget of the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations For...

CVE-2022-20369

An out-of-bounds write flaw was found in the Linux kernel’s UVC camera and similar device driver code due to improper input validation in the v4l2-mem2mem.c source code in how a user calls ioctl VIDIOCQUERYBUF with mmap. This issue occurs if the capture buffer mapped directly from the userspace...

GSD-2022-1004257 usb: gadget: uvc: fix list double add in uvcg_video_pump

usb: gadget: uvc: fix list double add in uvcgvideopump This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.8 by commit...

Privilege Escalation

kernel is vulnerable to privilege escalation. There is a possible linked list corruption in uvcscanchainforward of uvcdriver.c due to an unusual root cause which could lead to a local escalation of privileges in the library with no additional execution privileges needed...