CVEvulnerability

CVE-2022-2964

7.8 HIGH Published 2022-09-09 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-09-09
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-119, CWE-787

Description

A flaw was found in the Linux kernel’s driver for the ASIX AX88179_178A-based USB 2.0/3.0 Gigabit Ethernet Devices. The vulnerability contains multiple out-of-bounds reads and possible out-of-bounds writes.

Affected configurations

• linux linux kernel (>= 4.20 < 5.4.180) • linux linux kernel (>= 5.5 < 5.10.101) • linux linux kernel (>= 5.11 < 5.15.24) • linux linux kernel (>= 5.16 < 5.16.10) • redhat enterprise linux 7.0 • redhat enterprise linux 8.0 • redhat enterprise linux 9.0 • netapp h300s firmware • netapp h500s firmware • netapp h700s firmware • netapp h410s firmware • netapp h410c firmware

Related

Weakness · CWE (2)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
  • CWE-787 Out-of-bounds Write weakness

References