Out-of-bounds Access in RX Fixup in net: usb: aqc111
Summary
GSD-2022-1001954: net: usb: aqc111: Fix out-of-bounds accesses in RX fixup. Affects Kernel versions < d90df6da50c56ad8b1a132e3cf86b6cdf8f507b7. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The net: usb: aqc111 package is a part of the Linux Kernel ecosystem. It provides support for the Aquantia AQC111 USB to Ethernet adapter. This package allows users to connect their devices to Ethernet networks via a USB port. The vulnerability in this package involves out-of-bounds accesses in the RX fixup functionality.
Vulnerability Detail
The vulnerability in net: usb: aqc111 package allows for out-of-bounds accesses in the RX fixup process. This can potentially lead to memory corruption or information disclosure. An attacker could exploit this vulnerability by sending specially crafted USB packets to a system with the vulnerable driver, potentially resulting in a denial of service or arbitrary code execution. The vulnerability was fixed in Linux Kernel version v5.10.112 by commit d90df6da50c56ad8b1a132e3cf86b6cdf8f507b7.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is recommended to apply the fix as soon as possible.
Conclusion
The net: usb: aqc111 package in the Linux Kernel is vulnerable to out-of-bounds accesses in the RX fixup process. This vulnerability can lead to memory corruption or information disclosure. It is crucial to update the Linux Kernel to version v5.10.112 or later to mitigate the risk. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The net: usb: aqc111 package is a part of the Linux Kernel ecosystem and provides support for the Aquantia AQC111 USB to Ethernet adapter.
The vulnerability can lead to memory corruption or information disclosure. An attacker could potentially exploit it to cause a denial of service or execute arbitrary code.
To fix this vulnerability, update your Linux Kernel to version v5.10.112 or later.
There is no known workaround for this vulnerability. It is recommended to apply the fix as soon as possible.
You can find more information about this vulnerability in the Linux Kernel repository and the provided references link.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
