CVE-2022-2964

Updated: 2026-02-27 02:26:23.675549

Description:

A flaw was found in the Linux kernel’s driver for the ASIX AX88179_178A-based USB 2.0/3.0 Gigabit Ethernet Devices. The vulnerability contains multiple out-of-bounds reads and possible out-of-bounds writes.


Links NIST CIRCL RHEL Ubuntu

Severity

Severity Score
CVSS Version 2.x 0.0
CVSS Version 3.x HIGH 7.8

Status

OS name Project name Version Score Severity Status Errata Last updated

Statement

AlmaLinux 9.2 ESU kernel 5.14.0 7.8 HIGH Already Fixed 2024-01-19 03:06:20
CentOS 6 ELS kernel 2.6.32 7.8 HIGH Not Vulnerable 2023-04-13 03:22:29 CVE-2022-2964 targets only the Linux kernel’s ASIX AX88179_178A USB Ethernet driver (ax88179_178a)...
CentOS 7 ELS kernel 3.10.0 7.8 HIGH Not Vulnerable 2023-11-02 14:11:50 CVE‑2022‑2964 only affects the Linux ax88179_178a driver used by ASIX AX88179/178A USB Gigabit E...
CentOS 8.4 ELS kernel 4.18.0 7.8 HIGH Released CLSA-2023:1686585068 2023-06-13 09:08:30
CentOS 8.5 ELS kernel 4.18.0 7.8 HIGH Released CLSA-2023:1686651204 2023-06-13 09:08:31
CloudLinux 6 ELS kernel 2.6.32 7.8 HIGH Not Vulnerable 2023-04-13 03:22:29
Oracle Linux 6 ELS kernel 2.6.32 7.8 HIGH Not Vulnerable 2023-04-13 03:22:29 CVE-2022-2964 targets only the Linux kernel’s ASIX AX88179_178A USB Ethernet driver (ax88179_178a)...
Ubuntu 16.04 ELS linux 4.4.0 7.8 HIGH Released CLSA-2022:1667414297 2022-11-02 17:02:38