USB Driver Vulnerability in Linux Kernel Affecting Media Devices by Open Source Community

CVE-2022-49937

What is CVE-2022-49937?

An issue has been identified within the mceusb driver in the Linux kernel, where improper handling of USB control messages can lead to erroneous behavior. The driver fails to correctly set the USB direction in the bRequestType field when sending a control message. This oversight can result in warnings and potential instability by failing to align with expected communication protocols. A fix has been introduced to streamline the driver code, enhancing reliability and simplifying the communication process through the newly implemented usb_control_msg_recv() and usb_control_msg_send() routines.

References