CVE-2022-25375 log

Source	CVE Red Hat MITRE NVD Debian Ubuntu SUSE Alpine Mageia CVE Details CIRCL Bugs Arch Linux Red Hat Gentoo SUSE GitHub Lists oss-security full-disclosure bugtraq Misc GitHub code web search
Severity	Medium
Remote	Unknown
Type	Information disclosure
Description	RNDIS USB gadget in drivers/usb/gadget/function/rndis.c lacks validation of the size of the RNDIS_MSG_SET command. Attackers can obtain sensitive information from kernel memory.

References
http://www.openwall.com/lists/oss-security/2022/02/21/1