CVE-2022-49226

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved. The issue was related to the asix driver, where the asix read cmd() function would read less bytes than requested by the caller. This problem was identified by Syzbot, which hit an uninit value in the asix driver. The vulnerability was addressed by adding proper error handling of USB read errors and including a sanity check inside asix read cmd() to ensure that the bytes read are not less than what was requested.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.