In the Linux kernel, the following vulnerability has been resolved:
net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup
ax88179_rx_fixup() contains several out-of-bounds accesses that can be triggered by a malicious (or defective) USB device, in particular:
- The metadata array (hdr_off..hdr_off+2*pkt_cnt) can be out of bounds, causing OOB reads and (on big-endian systems) OOB endianness flips. - A packet can overlap the metadata array, causing a later OOB endianness flip to corrupt data used by a cloned SKB that has already been handed off into the network stack. - A packet SKB can be constructed whose tail is far beyond its end, causing out-of-bounds heap data to be considered part of the SKB's data.
I have tested that this can be used by a malicious USB device to send a bogus ICMPv6 Echo Request and receive an ICMPv6 Echo Reply in response that contains random kernel heap data. It's probably also possible to get OOB writes from this on a little-endian system somehow - maybe by triggering skb_cow() via IP options processing -, but I haven't tested that.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.102-99.473Upgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-livepatch-4.14.268-205.500Upgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade python-perfUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade perf | Aug 19, 2024 | Jul 16, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jul 30, 2024 |
| Dell Powerstore Dsa2025086 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Feb 20, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade bpftoolUpgrade python3-perf | Oct 9, 2024 | Jul 16, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 16, 2024 |
| Ubuntu | — | Upgrade linux-ibm-5.4Upgrade linuxUpgrade linux-awsUpgrade linux-gcp-5.4Upgrade linux-hweUpgrade linux-iotUpgrade linux-bluefieldUpgrade linux-lts-xenialUpgrade linux-gcp-fipsUpgrade linux-gcpUpgrade linux-azureUpgrade linux-raspi-5.4Upgrade linux-azure-4.15Upgrade linux-hwe-5.4Upgrade linux-azure-5.4Upgrade linux-gcp-4.15Upgrade linux-ibmUpgrade linux-azure-fipsUpgrade linux-aws-fipsUpgrade linux-aws-5.4Upgrade linux-fipsUpgrade linux-kvmUpgrade linux-oracleUpgrade linux-raspiUpgrade linux-oracle-5.4Upgrade linux-gkeopUpgrade linux-intel-iotg-5.15Upgrade linux-aws-hwe | Nov 19, 2024 | Jul 16, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Jul 16, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub