CVE-2022-50132

CVE-2022-50132 (Linux kernel) affects the usb: cdns3 gadget code. The root cause is an invalid dereference when ep is NULL due to the placement of the priv_ep assignment. The vulnerability is resolved by changing the assignment location in cdns3_gadget_ep_dequeue() and cdns3_gadget_ep_enable(), p...