In the Linux kernel, the following vulnerability has been resolved:
net: usb: aqc111: fix error handling of usbnet read calls
Syzkaller, courtesy of syzbot, identified an error (see report [1]) in aqc111 driver, caused by incomplete sanitation of usb read calls' results. This problem is quite similar to the one fixed in commit 920a9fa27e78 ("net: asix: add proper error handling of usb read errors").
For instance, usbnet_read_cmd() may read fewer than 'size' bytes, even if the caller expected the full amount, and aqc111_read_cmd() will not check its result properly. As [1] shows, this may lead to MAC address in aqc111_bind() being only partly initialized, triggering KMSAN warnings.
Fix the issue by verifying that the number of bytes read is as expected and not less.
[1] Partial syzbot report: BUG: KMSAN: uninit-value in is_valid_ether_addr include/linux/etherdevice.h:208 [inline] BUG: KMSAN: uninit-value in usbnet_probe+0x2e57/0x4390 drivers/net/usb/usbnet.c:1830 is_valid_ether_addr include/linux/etherdevice.h:208 [inline] usbnet_probe+0x2e57/0x4390 drivers/net/usb/usbnet.c:1830 usb_probe_interface+0xd01/0x1310 drivers/usb/core/driver.c:396 call_driver_probe drivers/base/dd.c:-1 [inline] really_probe+0x4d1/0xd90 drivers/base/dd.c:658 __driver_probe_device+0x268/0x380 drivers/base/dd.c:800 ...
Uninit was stored to memory at: dev_addr_mod+0xb0/0x550 net/core/dev_addr_lists.c:582 __dev_addr_set include/linux/netdevice.h:4874 [inline] eth_hw_addr_set include/linux/etherdevice.h:325 [inline] aqc111_bind+0x35f/0x1150 drivers/net/usb/aqc111.c:717 usbnet_probe+0xbe6/0x4390 drivers/net/usb/usbnet.c:1772 usb_probe_interface+0xd01/0x1310 drivers/usb/core/driver.c:396 ...
Uninit was stored to memory at: ether_addr_copy include/linux/etherdevice.h:305 [inline] aqc111_read_perm_mac drivers/net/usb/aqc111.c:663 [inline] aqc111_bind+0x794/0x1150 drivers/net/usb/aqc111.c:713 usbnet_probe+0xbe6/0x4390 drivers/net/usb/usbnet.c:1772 usb_probe_interface+0xd01/0x1310 drivers/usb/core/driver.c:396 call_driver_probe drivers/base/dd.c:-1 [inline] ...
Local variable buf.i created at: aqc111_read_perm_mac drivers/net/usb/aqc111.c:656 [inline] aqc111_bind+0x221/0x1150 drivers/net/usb/aqc111.c:713 usbnet_probe+0xbe6/0x4390 drivers/net/usb/usbnet.c:1772
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jul 4, 2025 | Jul 4, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Sep 10, 2025 | Jul 3, 2025 |
| Suse | — | Upgrade kernel-symsUpgrade kernel-azure-optionalUpgrade kernel-64kb-develUpgrade kernel-syms-azureUpgrade cluster-md-kmp-rtUpgrade kernel-azure-develUpgrade dlm-kmp-64kbUpgrade kernel-develUpgrade kernel-devel-azureUpgrade kernel-kvmsmallUpgrade dtb-caviumUpgrade kernel-rt-extraUpgrade cluster-md-kmp-64kbUpgrade dtb-xilinxUpgrade dtb-exynosUpgrade dtb-alteraUpgrade dtb-nvidiaUpgrade ocfs2-kmp-rtUpgrade kernel-rtUpgrade kernel-default-optionalUpgrade kernel-rt-livepatchUpgrade kernel-sourceUpgrade dtb-sprdUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-rtUpgrade gfs2-kmp-defaultUpgrade dtb-qcomUpgrade dtb-armUpgrade kernel-devel-rtUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-azureUpgrade kernel-default-vdsoUpgrade dtb-allwinnerUpgrade dtb-rockchipUpgrade dtb-apmUpgrade dtb-mediatekUpgrade kernel-rt-develUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-azureUpgrade kernel-debug-develUpgrade kernel-default-manUpgrade kernel-rt-vdsoUpgrade kernel-azure-vdsoUpgrade dlm-kmp-rtUpgrade dtb-renesasUpgrade dtb-broadcomUpgrade reiserfs-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade kernel-source-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt_debugUpgrade kernel-rt_debug-develUpgrade reiserfs-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-64kbUpgrade kernel-64kb-optionalUpgrade dtb-marvellUpgrade kernel-obs-qaUpgrade kernel-default-baseUpgrade kernel-debugUpgrade dtb-amlogicUpgrade kselftests-kmp-defaultUpgrade dtb-appleUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-syms-rtUpgrade kernel-obs-buildUpgrade kernel-kvmsmall-develUpgrade kernel-default-develUpgrade kernel-default-extraUpgrade kernel-azure-extraUpgrade kernel-azureUpgrade gfs2-kmp-64kbUpgrade dtb-lgUpgrade dtb-freescaleUpgrade dtb-amdUpgrade dtb-amazonUpgrade cluster-md-kmp-azureUpgrade kernel-defaultUpgrade dlm-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-macrosUpgrade kernel-docsUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-extraUpgrade dlm-kmp-azureUpgrade kernel-debug-vdsoUpgrade kernel-rt-optionalUpgrade kernel-docs-htmlUpgrade kernel-default-livepatchUpgrade kernel-default-livepatch-develUpgrade dtb-hisiliconUpgrade kselftests-kmp-azureUpgrade kernel-source-azureUpgrade dtb-socionext | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-aws-5.15Upgrade linux-image-aws-64k-5.15Upgrade linux-image-gkeopUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-5.15.0-1034-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1087-nvidia-lowlatencyUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oracle-6.14Upgrade linux-image-generic-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-realtime-6.14Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-oem-22.04Upgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-intelUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-5.15.0-1092-aws-64kUpgrade linux-image-oem-24.04bUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-generic-5.15Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-5.15.0-1045-nvidia-tegraUpgrade linux-image-oracle-5.15Upgrade linux-image-nvidia-6.8Upgrade linux-image-raspiUpgrade linux-image-oem-22.04cUpgrade linux-image-6.14.0-1013-awsUpgrade linux-image-aws-fips-5.15Upgrade linux-image-azure-fips-5.15Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-5.15.0-1045-nvidia-tegra-rtUpgrade linux-image-intel-iotgUpgrade linux-image-ibmUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.15.0-1092-gcp-fipsUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-5.15.0-1092-awsUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-ibm-5.15Upgrade linux-image-genericUpgrade linux-image-gke-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-gcp-64kUpgrade linux-image-lowlatency-6.8Upgrade linux-image-azure-6.14Upgrade linux-image-5.15.0-1056-xilinx-zynqmpUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-kvm-5.15Upgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-generic-64k-5.15Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-oem-6.14Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidiaUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-virtual-6.8Upgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-aws-6.8Upgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-azure-6.8Upgrade linux-image-5.15.0-1089-gkeUpgrade linux-image-5.15.0-1090-oracleUpgrade linux-image-5.15.0-1096-azureUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-tegraUpgrade linux-image-lowlatency-5.15Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-gkeop-5.15Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-oem-24.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1087-nvidiaUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-fipsUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-ibm-6.8Upgrade linux-image-realtimeUpgrade linux-image-raspi-realtimeUpgrade linux-image-oem-24.04cUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-5.15.0-156-lowlatencyUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-gcp-6.14Upgrade linux-image-fips-6.8Upgrade linux-image-aws-64k-6.14Upgrade linux-image-gcp-6.8Upgrade linux-image-xilinxUpgrade linux-image-5.15.0-1086-raspiUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-raspi-6.8Upgrade linux-image-raspi-5.15Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-gcpUpgrade linux-image-fips-5.15Upgrade linux-image-azure-5.15Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-5.15.0-156-generic-64kUpgrade linux-image-generic-64k-6.14Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-6.14.0-1012-oemUpgrade linux-image-5.15.0-1088-kvmUpgrade linux-image-5.15.0-1086-ibmUpgrade linux-image-5.15.0-1085-intel-iot-realtimeUpgrade linux-image-virtual-6.14Upgrade linux-image-virtualUpgrade linux-image-realtime-5.15Upgrade linux-image-oem-24.04aUpgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-5.15.0-156-genericUpgrade linux-image-generic-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-azure-cvmUpgrade linux-image-aws-fips-6.8Upgrade linux-image-aws-6.14Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-generic-64k-6.8Upgrade linux-image-gcp-5.15Upgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-156-fipsUpgrade linux-image-oem-22.04dUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-5.15.0-1092-aws-fipsUpgrade linux-image-xilinx-6.8Upgrade linux-image-generic-6.14Upgrade linux-image-5.15.0-156-lowlatency-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-5.15.0-156-generic-lpaeUpgrade linux-image-5.15.0-1092-gcpUpgrade linux-image-gke-64k-6.8Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-kvmUpgrade linux-image-azure-fipsUpgrade linux-image-aws-64k-6.8Upgrade linux-image-5.15.0-1075-gkeopUpgrade linux-image-awsUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-6.14.0-1012-azureUpgrade linux-image-5.15.0-1034-nvidia-tegra-igxUpgrade linux-image-5.15.0-1096-azure-fipsUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-gcp-fipsUpgrade linux-image-raspi-6.14Upgrade linux-image-ibm-classicUpgrade linux-image-aws-lts-24.04Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-azure-lts-24.04Upgrade linux-image-5.15.0-1092-realtimeUpgrade linux-image-5.15.0-1087-intel-iotgUpgrade linux-image-nvidia-5.15Upgrade linux-image-virtual-5.15Upgrade linux-image-gke-6.8Upgrade linux-image-oracle-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-azure-fips-6.8Upgrade linux-image-azureUpgrade linux-image-6.14.0-32-genericUpgrade linux-image-6.14.0-32-generic-64k | Jul 7, 2025 | Jul 3, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | Jul 3, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub