In the Linux kernel, the following vulnerability has been resolved:
net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup
ax88179_rx_fixup() contains several out-of-bounds accesses that can be triggered by a malicious (or defective) USB device, in particular:
- The metadata array (hdr_off..hdr_off+2*pkt_cnt) can be out of bounds, causing OOB reads and (on big-endian systems) OOB endianness flips. - A packet can overlap the metadata array, causing a later OOB endianness flip to corrupt data used by a cloned SKB that has already been handed off into the network stack. - A packet SKB can be constructed whose tail is far beyond its end, causing out-of-bounds heap data to be considered part of the SKB's data.
I have tested that this can be used by a malicious USB device to send a bogus ICMPv6 Echo Request and receive an ICMPv6 Echo Reply in response that contains random kernel heap data. It's probably also possible to get OOB writes from this on a little-endian system somehow - maybe by triggering skb_cow() via IP options processing -, but I haven't tested that.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade python-perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade perfUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.102-99.473Upgrade bpftoolUpgrade python-perf-debuginfoUpgrade kernel-livepatch-4.14.268-205.500Upgrade kernel-tools-develUpgrade kernelUpgrade kernel-debuginfo-common-x86_64 | Aug 19, 2024 | Jul 16, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jul 30, 2024 |
| Dell Powerstore Dsa2025086 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Feb 20, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade bpftool | Oct 9, 2024 | Jul 16, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 16, 2024 |
| Ubuntu | — | Upgrade linux-azure-fipsUpgrade linux-intel-iotg-5.15Upgrade linux-raspiUpgrade linux-gkeopUpgrade linux-oracle-5.4Upgrade linux-ibmUpgrade linux-oracleUpgrade linux-aws-5.4Upgrade linux-kvmUpgrade linux-fipsUpgrade linux-aws-fipsUpgrade linux-aws-hweUpgrade linux-bluefieldUpgrade linux-gcp-fipsUpgrade linux-gcp-4.15Upgrade linuxUpgrade linux-awsUpgrade linux-raspi-5.4Upgrade linux-lts-xenialUpgrade linux-hwe-5.4Upgrade linux-iotUpgrade linux-gcp-5.4Upgrade linux-ibm-5.4Upgrade linux-hweUpgrade linux-azure-4.15Upgrade linux-gcpUpgrade linux-azureUpgrade linux-azure-5.4 | Nov 19, 2024 | Jul 16, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Jul 16, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub