CVE-2022-49937

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

media: mceusb: Use new usb_control_msg_*() routines

Automatic kernel fuzzing led to a WARN about invalid pipe direction in

the mceusb driver:

------------[ cut here ]------------

usb 6-1: BOGUS control dir, pipe 80000380 doesn't match bRequestType 40

WARNING: CPU: 0 PID: 2465 at drivers/usb/core/urb.c:410

usb_submit_urb+0x1326/0x1820 drivers/usb/core/urb.c:410

Modules linked in:

CPU: 0 PID: 2465 Comm: kworker/0:2 Not tainted 5.19.0-rc4-00208-g69cb6c6556ad #1

Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS

1.13.0-1ubuntu1.1 04/01/2014

Workqueue: usb_hub_wq hub_event

RIP: 0010:usb_submit_urb+0x1326/0x1820 drivers/usb/core/urb.c:410

Code: 7c 24 40 e8 ac 23 91 fd 48 8b 7c 24 40 e8 b2 70 1b ff 45 89 e8

44 89 f1 4c 89 e2 48 89 c6 48 c7 c7 a0 30 a9 86 e8 48 07 11 02 <0f> 0b

e9 1c f0 ff ff e8 7e 23 91 fd 0f b6 1d 63 22 83 05 31 ff 41

RSP: 0018:ffffc900032becf0 EFLAGS: 00010282

RAX: 0000000000000000 RBX: ffff8881

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References