USB AX88179_178a Vulnerability in Linux Kernel
Summary
GSD-2022-1004547: net: usb: ax88179_178a needs FLAG_SEND_ZLP. Affects Kernel versions < f7c1fc0dec97b882c105a0887bef585471cf1262. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The USB AX88179_178a is a network adapter driver in the Linux Kernel. It provides support for USB-to-Ethernet adapters based on the AX88179_178a chipset. These adapters are commonly used to connect devices to a network via USB. The driver handles the communication between the adapter and the operating system, enabling network connectivity. However, a vulnerability has been discovered in this driver that could potentially be exploited by attackers.
Vulnerability Detail
The vulnerability in the USB AX88179_178a driver is related to the handling of Zero-Length Packets (ZLPs). ZLPs are special packets used in USB communication to indicate the end of a transfer. The driver does not properly handle ZLPs, which can lead to various security issues. An attacker could potentially exploit this vulnerability to execute arbitrary code, escalate privileges, or cause a denial-of-service (DoS) condition. The impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The USB AX88179_178a driver in the Linux Kernel is vulnerable to a security issue related to the handling of Zero-Length Packets (ZLPs). This vulnerability could potentially be exploited to execute arbitrary code, escalate privileges, or cause a denial-of-service (DoS) condition. It is recommended to update the Linux Kernel to version v5.10.134 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The USB AX88179_178a driver is a network adapter driver in the Linux Kernel that provides support for USB-to-Ethernet adapters based on the AX88179_178a chipset.
A Zero-Length Packet (ZLP) is a special packet used in USB communication to indicate the end of a transfer.
The potential impacts of this vulnerability include arbitrary code execution, privilege escalation, and denial-of-service (DoS) attacks.
No, the impact and attack plausibility of this vulnerability have not been proven yet.
To fix this vulnerability, users should update their Linux Kernel to version v5.10.134 or later.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
