CVE-2022-50156

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2022-50156
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-50156.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2022-50156
Downstream
Related
Published
2025-06-18T11:03:13.913Z
Modified
2026-05-28T03:53:11.866332632Z
Summary
HID: cp2112: prevent a buffer overflow in cp2112_xfer()
Details

In the Linux kernel, the following vulnerability has been resolved:

HID: cp2112: prevent a buffer overflow in cp2112_xfer()

Smatch warnings: drivers/hid/hid-cp2112.c:793 cp2112_xfer() error: __memcpy() 'data->block[1]' too small (33 vs 255) drivers/hid/hid-cp2112.c:793 cp2112_xfer() error: __memcpy() 'buf' too small (64 vs 255)

The 'readlength' variable is provided by 'data->block[0]' which comes from user and it(readlength) can take a value between 0-255. Add an upper bound to 'read_length' variable to prevent a buffer overflow in memcpy().

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50156.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
542134c0375b5ca2b1d18490c02b8a20bfdd8d74
Fixed
3af7d60e9a6c17d6d41c4341f8020511887d372d
Fixed
519ff31a6ddd87aa4905bd9bf3b92e8b88801614
Fixed
ebda3d6b004bb6127a66a616524a2de152302ca7
Fixed
8489a20ac481b08c0391608d81ed3796d373cfdf
Fixed
e7028944e61014ae915e7fb74963d3835f2f761a
Fixed
26e427ac85c2b8d0d108cc80b6de34d33e2780c4
Fixed
381583845d19cb4bd21c8193449385f3fefa9caf

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-50156.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.15.0
Fixed
4.19.256
Type
ECOSYSTEM
Events
Introduced
4.20.0
Fixed
5.4.211
Type
ECOSYSTEM
Events
Introduced
5.5.0
Fixed
5.10.137
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.61
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
5.18.18
Type
ECOSYSTEM
Events
Introduced
5.19.0
Fixed
5.19.2

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-50156.json"