CVE-2022-24958

HighCVSS 7.8/10Last modified Sep 11, 2026

Description

drivers/usb/gadget/legacy/inode.c in the Linux kernel through 5.16.8 mishandles dev->buf release.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-763

Affected software

No affected versions have been published.

Timeline

Published
Feb 11, 2022
Last modified
Sep 11, 2026
NVD status
Analyzed

Related CVEs from 2022

CVE-2022-249595.5An issue was discovered in the Linux kernel before 5.16.5. There is a memory leak in yam_siocdevprivate in drivers/net/hamradio/yam.c.CVE-2022-249607.8A use after free vulnerability was discovered in PDFTron SDK version 9.2.0. A crafted PDF can overwrite RIP with data previously allocated oCVE-2022-249619.8In Portainer Agent before 2.11.1, an API server can continue running even if not associated with a Portainer instance in the past few days.CVE-2022-249639.8Integer Overflow or Wraparound vulnerability in apr_encode functions of Apache Portable Runtime (APR) allows an attacker to write beyond bouCVE-2022-249675.4Black Rainbow NIMBUS before 3.7.0 allows stored Cross-site Scripting (XSS).CVE-2022-249685.9In Mellium mellium.im/xmpp through 0.21.0, an attacker capable of spoofing DNS TXT records can redirect a WebSocket connection request to a CVE-2022-249696.1bypass CVE-2021-25640 > In Apache Dubbo prior to 2.6.12 and 2.7.15, the usage of parseURL method will lead to the bypass of the white host cCVE-2022-24976.4An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.6 before 15.0.5, all versions starting from 15.1 beforeCVE-2022-249718.8This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. User interaCVE-2022-249726.5This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR940N 3.20.1CVE-2022-249738.0This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR940N 3.20.1 Build 2CVE-2022-249745.3Links may not be rewritten according to policy in some specially formatted emails.
CVE-2022-24958: High severity, CVSS 7.8 | Vulnix