CVE-2022-50733

A use of uninitialized memory was found in the Linux kernel's idmouse USB fingerprint reader driver. In idmouse_create_image(), when any ftip_command() fails, control jumps to the reset label but leaves bulk_in_buffer data uninitialized. The subsequent check for a valid image then dereferences this uninitialized data, leading to undefined behavior.

This flaw was discovered by KMSAN (Kernel Memory Sanitizer) and affects systems with Siemens ID Mouse fingerprint readers. The uninitialized memory access occurs in an error handling path when USB commands fail. Exploitation requires physical access to connect a specific USB device and trigger the error condition.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the idmouse module from being loaded. See https://access.redhat.com/solutions/41278 for instructions.