Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: asix: fix uninit-value in asix_mdio_read() asix_read_cmd() may read less than sizeof(smsr) bytes and in this case smsr will be uninitialized. Fail log: BUG: KMSAN: uninit-value in asix_check_host_enable drivers/net/usb/asix_common.c:82 [inline] BUG: KMSAN: uninit-value in asix_check_host_enable drivers/net/usb/asix_common.c:82 [inline] drivers/net/usb/asix_common.c:497 BUG: KMSAN: uninit-value in asix_mdio_read+0x3c1/0xb00 drivers/net/usb/asix_common.c:497 drivers/net/usb/asix_common.c:497 asix_check_host_enable drivers/net/usb/asix_common.c:82 [inline] asix_check_host_enable drivers/net/usb/asix_common.c:82 [inline] drivers/net/usb/asix_common.c:497 asix_mdio_read+0x3c1/0xb00 drivers/net/usb/asix_common.c:497 drivers/net/usb/asix_common.c:497
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected d9fe64e511144c1ee7d7555b4111f09dde9692ef before d259f621c85949f30cc578cac813b82bb5169f56; affected d9fe64e511144c1ee7d7555b4111f09dde9692ef before 8035b1a2a37a29d8c717ef84fca8fe7278bc9f03 |
| Linux / Linux | affected 4.9; unaffected 0 before 4.9; unaffected 5.15.12 through 5.15.*; unaffected 5.16 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/d259f621c85949f30cc578cac813b82bb5169f56
- https://git.kernel.org/stable/c/8035b1a2a37a29d8c717ef84fca8fe7278bc9f03
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.