CVE-2022-49226

net: asix: add proper error handling of usb read errors

State
Published
Severity
Not scored
Published
Feb 26, 2025
Updated
May 11, 2026
Reserved
Feb 26, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

net: asix: add proper error handling of usb read errors

Syzbot once again hit uninit value in asix driver. The problem still the same -- asix_read_cmd() reads less bytes, than was requested by caller.

Since all read requests are performed via asix_read_cmd() let's catch usb related error there and add __must_check notation to be sure all callers actually check return value.

So, this patch adds sanity check inside asix_read_cmd(), that simply checks if bytes read are not less, than was requested and adds missing error handling of asix_read_cmd() all across the driver code.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • d9fe64e511144c1ee7d7555b4111f09dde9692ef to before b96a7265f763b37ff3138b9ca8122a950f13b00eAffected
  • d9fe64e511144c1ee7d7555b4111f09dde9692ef to before 9ea8d2fca8fea3b17005b4dc02f8ef15f7a2fb97Affected
  • d9fe64e511144c1ee7d7555b4111f09dde9692ef to before 662ff765470ad0d11a1153d6d8e99d69a98e60b4Affected
  • d9fe64e511144c1ee7d7555b4111f09dde9692ef to before 920a9fa27e7805499cfe78491b36fed2322c02ecAffected
LinuxLinux
  • 4.9Affected
  • before 4.9Not affected
  • 5.15.33 through 5.15.*Not affected
  • 5.16.19 through 5.16.*Not affected
  • 5.17.2 through 5.17.*Not affected
  • 5.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.