net: asix: add proper error handling of usb read errors
Summary
GSD-2022-1001859: net: asix: add proper error handling of usb read errors. Affects Kernel versions >= d9fe64e511144c1ee7d7555b4111f09dde9692ef, < b96a7265f763b37ff3138b9ca8122a950f13b00e. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The net package in the Linux Kernel is responsible for managing network devices and protocols. It provides the necessary functionality for network communication. The asix driver is specifically designed for ASIX AX8817X/772X/178/179 USB Ethernet adapters. These adapters allow users to connect their devices to a network via USB. However, a vulnerability has been discovered in the asix driver that could lead to potential security issues.
Vulnerability Detail
The vulnerability in the asix driver involves the improper handling of USB read errors. When reading data from the USB interface, errors may occur. However, the driver does not handle these errors properly, potentially leading to unexpected behavior or security vulnerabilities. The impact and attack plausibility of this vulnerability have not been proven yet. It is important to note that this vulnerability was introduced in Linux Kernel version 4.9 and has been fixed in version 5.15.33.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The asix driver in the Linux Kernel is vulnerable to improper error handling of USB read errors. This vulnerability can potentially lead to unexpected behavior or security issues. It is crucial to update the Kernel to version 5.15.33 or later to address this vulnerability. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The impact of this vulnerability is not yet proven. However, it could potentially lead to unexpected behavior or security vulnerabilities.
You can use Vulert's playground at Vulert Scanner to check if your system is affected by this vulnerability. Simply provide the manifest file like package-lock.json, and Vulert will analyze it in real-time.
Yes, the fix for this vulnerability is available in Linux Kernel version 5.15.33 or later. It is recommended to update the Kernel to ensure the vulnerability is addressed.
No specific workaround has been mentioned for this vulnerability. It is recommended to update the Kernel to the fixed version.
You can find more information about this vulnerability in the Open Source Vulnerability Database (OSVDB) entry with ID GSD-2022-1001859.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
