CVE-2022-25375

An issue was discovered in drivers/usb/gadget/function/rndis.c in the Linux kernel before 5.16.10. The RNDIS USB gadget lacks validation of the size of the RNDIS_MSG_SET command. Attackers can obtain sensitive information from kernel memory.

• CWE-1284

• http://www.openwall.com/lists/oss-security/2022/02/21/1Mailing List, Patch, Third Party Advisory
• https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.10Patch, Release Notes, Vendor Advisory
• https://github.com/szymonh/rndis-coThird Party Advisory
• https://github.com/torvalds/linux/commit/38ea1eac7d88072bbffb630e2b3db83ca649b826Patch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2022/03/msg00011.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2022/03/msg00012.htmlMailing List, Third Party Advisory
• https://www.debian.org/security/2022/dsa-5092Third Party Advisory
• https://www.debian.org/security/2022/dsa-5096Third Party Advisory
• http://www.openwall.com/lists/oss-security/2022/02/21/1Mailing List, Patch, Third Party Advisory
• https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.10Patch, Release Notes, Vendor Advisory
• https://github.com/szymonh/rndis-coThird Party Advisory
• https://github.com/torvalds/linux/commit/38ea1eac7d88072bbffb630e2b3db83ca649b826Patch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2022/03/msg00011.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2022/03/msg00012.htmlMailing List, Third Party Advisory
• https://www.debian.org/security/2022/dsa-5092Third Party Advisory
• https://www.debian.org/security/2022/dsa-5096Third Party Advisory

Published

Feb 20, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-2537The WooCommerce PDF Invoices & Packing Slips WordPress plugi…6.1
• CVE-2022-25370Apache OFBiz uses the Birt plugin (https://eclipse.github.io…5.4
• CVE-2022-25371Apache OFBiz uses the Birt project plugin (https://eclipse.g…9.8
• CVE-2022-25372Pritunl Client through 1.2.3019.52 on Windows allows local p…7.8
• CVE-2022-25373Zoho ManageEngine SupportCenter Plus before 11020 allows Sto…5.4
• CVE-2022-25374HashiCorp Terraform Enterprise v202112-1, v202112-2, v202201…7.5
• CVE-2022-25377The ACME-challenge endpoint in Appwrite 0.5.0 through 0.12.x…7.5
• CVE-2022-2538The WP Hide & Security Enhancer WordPress plugin before 1.8 …6.1
• CVE-2022-25389DCN Firewall DCME-520 was discovered to contain an arbitrary…7.5
• CVE-2022-2539An issue has been discovered in GitLab CE/EE affecting all v…5.3
• CVE-2022-25390DCN Firewall DCME-520 was discovered to contain a remote com…9.8
• CVE-2022-25393Simple Bakery Shop Management v1.0 was discovered to contain…7.5