CVE-2022-49151

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> can: mcba_usb: properly check endpoint type<br /> <br /> Syzbot reported warning in usb_submit_urb() which is caused by wrong<br /> endpoint type. We should check that in endpoint is actually present to<br /> prevent this warning.<br /> <br /> Found pipes are now saved to struct mcba_priv and code uses them<br /> directly instead of making pipes in place.<br /> <br /> Fail log:<br /> <br /> | usb 5-1: BOGUS urb xfer, pipe 3 != type 1<br /> | WARNING: CPU: 1 PID: 49 at drivers/usb/core/urb.c:502 usb_submit_urb+0xed2/0x18a0 drivers/usb/core/urb.c:502<br /> | Modules linked in:<br /> | CPU: 1 PID: 49 Comm: kworker/1:2 Not tainted 5.17.0-rc6-syzkaller-00184-g38f80f42147f #0<br /> | Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014<br /> | Workqueue: usb_hub_wq hub_event<br /> | RIP: 0010:usb_submit_urb+0xed2/0x18a0 drivers/usb/core/urb.c:502<br /> | ...<br /> | Call Trace:<br /> | <br /> | mcba_usb_start drivers/net/can/usb/mcba_usb.c:662 [inline]<br /> | mcba_usb_probe+0x8a3/0xc50 drivers/net/can/usb/mcba_usb.c:858<br /> | usb_probe_interface+0x315/0x7f0 drivers/usb/core/driver.c:396<br /> | call_driver_probe drivers/base/dd.c:517 [inline]