CVE-2022-49686

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-49686

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

I

n the Linux kernel, the following vulnerability has been resolved: usb: gadget: uvc: fix list double add in uvcg_video_pump A panic can occur if the endpoint becomes disabled and the uvcg_video_pump adds the request back to the req_free list after it has already been queued to the endpoint. The endpoint complete will add the request back to the req_free list. Invalidate the local request handle once it's been queued. <6>[ 246.796704][T13726] configfs-gadget gadget: uvc: uvc_function_set_alt(1, 0) <3>[ 246.797078][ T26] list_add double add: new=ffffff878bee5c40, prev=ffffff878bee5c40, next=ffffff878b0f0a90. <6>[ 246.797213][ T26] ------------[ cut here ]------------ <2>[ 246.797224][ T26] kernel BUG at lib/list_debug.c:31! <6>[ 246.807073][ T26] Call trace: <6>[ 246.807180][ T26] uvcg_video_pump+0x364/0x38c <6>[ 246.807366][ T26] process_one_work+0x2a4/0x544 <6>[ 246.807394][ T26] worker_thread+0x350/0x784 <6>[ 246.807442][ T26] kthread+0x2ac/0x320

References
Link Resource
https://git.kernel.org/stable/c/96163f835e65f8c9897487fac965819f0651d671 Patch
https://git.kernel.org/stable/c/d95ac8b920de1d39525fadc408ce675697626ca6 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:rc3:*:*:*:*:*:*
History

24 Oct 2025, 15:51

Type Values Removed Values Added
First Time Linux linux Kernel
Linux
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8
CWE CWE-415
CPE cpe:2.3:o:linux:linux_kernel:5.19:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:rc3:*:*:*:*:*:*
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: usb: gadget: uvc: fix list double add in uvcg_video_pump Puede producirse un pánico si el endpoint se deshabilita y uvcg_video_pump agrega la solicitud nuevamente a la lista req_free después de que ya se haya puesto en cola en el endpoint. La finalización del endpoint agregará la solicitud nuevamente a la lista req_free. Invalida el identificador de solicitud local una vez que se haya puesto en cola. &lt;6&gt;[ 246.796704][T13726] configfs-gadget gadget: uvc: uvc_function_set_alt(1, 0) &lt;3&gt;[ 246.797078][ T26] list_add double add: new=ffffff878bee5c40, prev=ffffff878bee5c40, next=ffffff878b0f0a90. &lt;6&gt;[ 246.797213][ T26] ------------[ cut here ]------------ &lt;2&gt;[ 246.797224][ T26] kernel BUG at lib/list_debug.c:31! &lt;6&gt;[ 246.807073][ T26] Call trace: &lt;6&gt;[ 246.807180][ T26] uvcg_video_pump+0x364/0x38c &lt;6&gt;[ 246.807366][ T26] process_one_work+0x2a4/0x544 &lt;6&gt;[ 246.807394][ T26] worker_thread+0x350/0x784 &lt;6&gt;[ 246.807442][ T26] kthread+0x2ac/0x320
References () https://git.kernel.org/stable/c/96163f835e65f8c9897487fac965819f0651d671 - () https://git.kernel.org/stable/c/96163f835e65f8c9897487fac965819f0651d671 - Patch
References () https://git.kernel.org/stable/c/d95ac8b920de1d39525fadc408ce675697626ca6 - () https://git.kernel.org/stable/c/d95ac8b920de1d39525fadc408ce675697626ca6 - Patch

26 Feb 2025, 07:01

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-26 07:01

Updated : 2025-10-24 15:51

NVD link : CVE-2022-49686

Mitre link : CVE-2022-49686

CVE.ORG link : CVE-2022-49686

JSON object : View

Products Affected

linux

CWE
CWE-415

Double Free