{"schema_version":"1.9.0","id":"ASB-A-222023189","published":"2022-06-01T00:00:00Z","modified":"2026-09-11T15:42:03.104094163Z","aliases":["A-222023189","CVE-2022-25258"],"details":"In composite_setup of composite.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege when connecting a malicious USB device with no additional execution privileges needed. User interaction is not needed for exploitation.","affected":[{"package":{"name":":linux_kernel:","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":":0"},{"fixed":":2022-06-05"}]}],"versions":["Kernel"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/kernel/common/+/22ec100472854","https://android.googlesource.com/kernel/common/+/c7732dbce590e"],"severity":"High","spl":"2022-06-05","types":["EoP"],"vanir_signatures":[{"deprecated":false,"digest":{"function_hash":"15411130885992590080241792335577292221","length":8670},"id":"ASB-A-222023189-450738e9","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/kernel/common/+/c7732dbce590e","target":{"file":"drivers/usb/gadget/composite.c","function":"composite_setup","truncated_path_level":1}},{"deprecated":false,"digest":{"line_hashes":["8228047372824403445809389804182550337","215290394054290689799362561037584581376","50834800687003401478418564196561689514","157624948906676408928048125434499571554"],"threshold":0.9},"id":"ASB-A-222023189-abae828f","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/kernel/common/+/c7732dbce590e","target":{"file":"drivers/usb/gadget/composite.c","truncated_path_level":1}},{"deprecated":false,"digest":{"function_hash":"15411130885992590080241792335577292221","length":8670},"id":"ASB-A-222023189-be9112ba","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/kernel/common/+/22ec100472854","target":{"file":"drivers/usb/gadget/composite.c","function":"composite_setup","truncated_path_level":1}},{"deprecated":false,"digest":{"line_hashes":["8228047372824403445809389804182550337","215290394054290689799362561037584581376","50834800687003401478418564196561689514","157624948906676408928048125434499571554"],"threshold":0.9},"id":"ASB-A-222023189-f59ba70b","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/kernel/common/+/22ec100472854","target":{"file":"drivers/usb/gadget/composite.c","truncated_path_level":1}}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-222023189.json"}}],"references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2022-06-01"},{"type":"FIX","url":"https://android.googlesource.com/kernel/common/+/22ec100472854"},{"type":"FIX","url":"https://android.googlesource.com/kernel/common/+/c7732dbce590e"}]}