A flaw was found in the Linux kernel’s driver for the ASIX AX88179_178A-based USB 2.0/3.0 Gigabit Ethernet Devices. The vulnerability contains multiple out-of-bounds reads and possible out-of-bounds writes.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00048.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel
Netapp
  • H300s
  • H300s Firmware
  • H410c
  • H410c Firmware
  • H410s
  • H410s Firmware
  • H500s
  • H500s Firmware
  • H700s
  • H700s Firmware
Redhat
  • Enterprise Linux
  • Rhel Aus
  • Rhel E4s
  • Rhel Eus
  • Rhel Extras Rt
  • Rhel Tus
  • Rhev Hypervisor

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Configuration 2 [-]

OR cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*

Configuration 3 [-]

AND
cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*

Configuration 4 [-]

AND
cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*

Configuration 5 [-]

AND
cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*

Configuration 6 [-]

AND
cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*

Configuration 7 [-]

AND
cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:netapp:h410c:-:*:*:*:*:*:*:*
Package CPE Advisory Released Date
Red Hat Enterprise Linux 7
kernel-rt-0:3.10.0-1160.83.1.rt56.1228.el7 cpe:/a:redhat:rhel_extras_rt:7 RHSA-2023:0400 2023-01-24T00:00:00Z
kernel-0:3.10.0-1160.83.1.el7 cpe:/o:redhat:enterprise_linux:7 RHSA-2023:0399 2023-01-24T00:00:00Z
kpatch-patch cpe:/o:redhat:enterprise_linux:7 RHSA-2023:0404 2023-01-24T00:00:00Z
Red Hat Enterprise Linux 8
kernel-rt-0:4.18.0-425.10.1.rt7.220.el8_7 cpe:/a:redhat:enterprise_linux:8::nfv RHSA-2023:0114 2023-01-12T00:00:00Z
kernel-0:4.18.0-425.10.1.el8_7 cpe:/o:redhat:enterprise_linux:8 RHSA-2023:0101 2023-01-12T00:00:00Z
kpatch-patch cpe:/o:redhat:enterprise_linux:8 RHSA-2023:0123 2023-01-12T00:00:00Z
Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions
kernel-0:4.18.0-147.80.1.el8_1 cpe:/o:redhat:rhel_e4s:8.1 RHSA-2023:0856 2023-02-21T00:00:00Z
kpatch-patch cpe:/o:redhat:rhel_e4s:8.1 RHSA-2023:0858 2023-02-21T00:00:00Z
Red Hat Enterprise Linux 8.2 Advanced Update Support
kernel-0:4.18.0-193.98.1.el8_2 cpe:/o:redhat:rhel_aus:8.2 RHSA-2023:0395 2023-01-24T00:00:00Z
Red Hat Enterprise Linux 8.2 Telecommunications Update Service
kernel-rt-0:4.18.0-193.98.1.rt13.149.el8_2 cpe:/a:redhat:rhel_tus:8.2::nfv RHSA-2023:0392 2023-01-24T00:00:00Z
kernel-0:4.18.0-193.98.1.el8_2 cpe:/o:redhat:rhel_tus:8.2 RHSA-2023:0395 2023-01-24T00:00:00Z
Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions
kernel-0:4.18.0-193.98.1.el8_2 cpe:/o:redhat:rhel_e4s:8.2 RHSA-2023:0395 2023-01-24T00:00:00Z
kpatch-patch cpe:/o:redhat:rhel_e4s:8.2 RHSA-2023:0396 2023-01-24T00:00:00Z
Red Hat Enterprise Linux 8.4 Extended Update Support
kernel-rt-0:4.18.0-305.76.1.rt7.148.el8_4 cpe:/a:redhat:rhel_eus:8.4::nfv RHSA-2023:0531 2023-01-30T00:00:00Z
kernel-0:4.18.0-305.76.1.el8_4 cpe:/o:redhat:rhel_eus:8.4 RHSA-2023:0496 2023-01-30T00:00:00Z
kpatch-patch cpe:/o:redhat:rhel_eus:8.4 RHSA-2023:0499 2023-01-30T00:00:00Z
Red Hat Enterprise Linux 8.6 Extended Update Support
kernel-0:4.18.0-372.46.1.el8_6 cpe:/o:redhat:rhel_eus:8.6 RHSA-2023:1130 2023-03-07T00:00:00Z
kpatch-patch cpe:/o:redhat:rhel_eus:8.6 RHSA-2023:1192 2023-03-13T00:00:00Z
Red Hat Enterprise Linux 9
kernel-0:5.14.0-162.12.1.el9_1 cpe:/a:redhat:enterprise_linux:9 RHSA-2023:0334 2023-01-23T00:00:00Z
kernel-rt-0:5.14.0-162.12.1.rt21.175.el9_1 cpe:/a:redhat:enterprise_linux:9::nfv RHSA-2023:0300 2023-01-23T00:00:00Z
kernel-0:5.14.0-162.12.1.el9_1 cpe:/o:redhat:enterprise_linux:9 RHSA-2023:0334 2023-01-23T00:00:00Z
kpatch-patch cpe:/o:redhat:enterprise_linux:9 RHSA-2023:0348 2023-01-23T00:00:00Z
Red Hat Enterprise Linux 9.0 Extended Update Support
kernel-0:5.14.0-70.43.1.el9_0 cpe:/a:redhat:rhel_eus:9.0 RHSA-2023:0512 2023-01-30T00:00:00Z
kernel-rt-0:5.14.0-70.43.1.rt21.114.el9_0 cpe:/a:redhat:rhel_eus:9.0::nfv RHSA-2023:0526 2023-01-30T00:00:00Z
kpatch-patch cpe:/o:redhat:rhel_eus:9.0 RHSA-2023:0536 2023-01-30T00:00:00Z
Red Hat Virtualization 4 for Red Hat Enterprise Linux 8
kernel-0:4.18.0-372.46.1.el8_6 cpe:/o:redhat:rhev_hypervisor:4.4::el8 RHSA-2023:1130 2023-03-07T00:00:00Z

No data.

Advisories
Source ID Title
EUVD EUVD EUVD-2022-35185 A flaw was found in the Linux kernel’s driver for the ASIX AX88179_178A-based USB 2.0/3.0 Gigabit Ethernet Devices. The vulnerability contains multiple out-of-bounds reads and possible out-of-bounds writes.
Ubuntu USN Ubuntu USN USN-5650-1 Linux kernel vulnerabilities
Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://bugzilla.redhat.com/show_bug.cgi?id=2067482 cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2022-2964 cve-icon
https://security.netapp.com/advisory/ntap-20230113-0001/ cve-icon cve-icon
https://www.cve.org/CVERecord?id=CVE-2022-2964 cve-icon
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published:

Updated: 2024-08-03T00:53:00.491Z

Reserved: 2022-08-23T00:00:00

Link: CVE-2022-2964

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2022-09-09T15:15:10.227

Modified: 2024-11-21T07:01:59.897

Link: CVE-2022-2964

cve-icon Redhat

Severity : Important

Publid Date: 2022-03-21T00:00:00Z

Links: CVE-2022-2964 - Bugzilla

cve-icon OpenCVE Enrichment

No data.