Vulnerability-Lookup

CVE-2022-2964 (GCVE-0-2022-2964)

Vulnerability from cvelistv5 – Published: 2022-09-09 00:00 – Updated: 2024-08-03 00:53

Summary

A flaw was found in the Linux kernel’s driver for the ASIX AX88179_178A-based USB 2.0/3.0 Gigabit Ethernet Devices. The vulnerability contains multiple out-of-bounds reads and possible out-of-bounds writes.

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-119

Assigner

redhat redhat root

References

2 references

URL	Tags
https://bugzilla.redhat.com/show_bug.cgi?id=2067482
https://security.netapp.com/advisory/ntap-2023011…

Impacted products

1 product

Vendor	Product	Version	CPE status
n/a	kernel	Affected: kernel 5.17

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T00:53:00.491Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2067482"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20230113-0001/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "kernel",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "kernel 5.17"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in the Linux kernel\u2019s driver for the ASIX AX88179_178A-based USB 2.0/3.0 Gigabit Ethernet Devices. The vulnerability contains multiple out-of-bounds reads and possible out-of-bounds writes."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-119",
              "description": "CWE-119",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-01-13T00:00:00.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2067482"
        },
        {
          "url": "https://security.netapp.com/advisory/ntap-20230113-0001/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2022-2964",
    "datePublished": "2022-09-09T00:00:00.000Z",
    "dateReserved": "2022-08-23T00:00:00.000Z",
    "dateUpdated": "2024-08-03T00:53:00.491Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2022-2964",
      "date": "2026-09-22",
      "epss": "0.00309",
      "percentile": "0.23928"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "product": "kernel",
                "vendor": "n/a",
                "versions": [
                  {
                    "status": "affected",
                    "version": "kernel 5.17"
                  }
                ]
              }
            ],
            "source": "secalert@redhat.com"
          }
        ],
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "6808B38F-AD73-4D55-A158-6EF605E8EB66",
                    "versionEndExcluding": "5.4.180",
                    "versionStartIncluding": "4.20",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "A154171E-A3B9-42BE-9E97-C9B0EA43FC54",
                    "versionEndExcluding": "5.10.101",
                    "versionStartIncluding": "5.5",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "866451F0-299E-416C-B0B8-AE6B33E62CCA",
                    "versionEndExcluding": "5.15.24",
                    "versionStartIncluding": "5.11",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "679523BA-1392-404B-AB85-F5A5408B1ECC",
                    "versionEndExcluding": "5.16.10",
                    "versionStartIncluding": "5.16",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "142AD0DD-4CF3-4D74-9442-459CE3347E3A",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "F4CFF558-3C47-480D-A2F0-BABF26042943",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "7F6FB57C-2BC7-487C-96DD-132683AEB35D",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "6770B6C3-732E-4E22-BF1C-2D2FD610061C",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "9F9C8C20-42EB-4AB5-BD97-212DEB070C43",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "7FFF7106-ED78-49BA-9EC5-B889E3685D53",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "E63D8B0F-006E-4801-BF9D-1C001BBFB4F9",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "56409CEC-5A1E-4450-AA42-641E459CC2AF",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "B06F4839-D16A-4A61-9BB5-55B13F41E47F",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "D0B4AD8A-F172-4558-AEC6-FF424BA2D912",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "8497A4C9-8474-4A62-8331-3FE862ED4098",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "234DEFE0-5CE5-4B0A-96B8-5D227CB8ED31",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:netapp:h410c:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "CDDF61B7-EC5C-467C-B710-B89F502CD04F",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "A flaw was found in the Linux kernel\u2019s driver for the ASIX AX88179_178A-based USB 2.0/3.0 Gigabit Ethernet Devices. The vulnerability contains multiple out-of-bounds reads and possible out-of-bounds writes."
          },
          {
            "lang": "es",
            "value": "Se ha encontrado un fallo en el controlador del kernel de Linux para los dispositivos USB 2.0/3.0 Gigabit Ethernet basados en ASIX versi\u00f3n AX88179_178A. La vulnerabilidad contiene m\u00faltiples lecturas fuera de l\u00edmites y posibles escrituras fuera de l\u00edmites"
          }
        ],
        "id": "CVE-2022-2964",
        "lastModified": "2026-06-17T04:42:53.780",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 7.8,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 1.8,
              "impactScore": 5.9,
              "source": "nvd@nist.gov",
              "type": "Primary"
            }
          ]
        },
        "published": "2022-09-09T15:15:10.227",
        "references": [
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Issue Tracking",
              "Patch",
              "Third Party Advisory"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2067482"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20230113-0001/"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Issue Tracking",
              "Patch",
              "Third Party Advisory"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2067482"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20230113-0001/"
          }
        ],
        "sourceIdentifier": "secalert@redhat.com",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-119"
              }
            ],
            "source": "secalert@redhat.com",
            "type": "Secondary"
          },
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-787"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Secondary"
          }
        ]
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Important",
      "current_release_date": "2026-06-28T07:54:52+00:00",
      "cve": "CVE-2022-2964",
      "id": "CVE-2022-2964",
      "initial_release_date": "2022-03-21T00:00:00+00:00",
      "product_status:fixed": "1389",
      "product_status:known_not_affected": "14",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: memory corruption in AX88179_178A based USB ethernet device.",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-2964.json",
      "version": "3"
    }
  }
}

ICSA-25-105-08

Vulnerability from csaf_cisa - Published: 2025-04-07 10:30 - Updated: 2025-04-07 10:30

Summary

ABB M2M Gateway

Scope

42 vulnerabilities in this advisory, including CVE-2022-2964.

CVE-2022-2964

7.3 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:W/RC:C

Known affected: 2 products

Open the full advisory

NCSC-2025-0382

Vulnerability from csaf_ncscnl - Published: 2025-12-09 13:15 - Updated: 2025-12-09 13:15

Summary

Kwetsbaarheden verholpen in Siemens producten

Scope

124 vulnerabilities in this advisory, including CVE-2022-2964.

CVE-2022-2964

Recent updates to various SUSE Linux Enterprise kernels addressed multiple security vulnerabilities, including use-after-free and memory corruption issues, across several versions and components.

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Known affected: 32 products

Open the full advisory

OESA-2022-1893 (CVE-2022-1462)

Vulnerability from osv_openeuler – Published: 2022-09-07 11:05 – Updated: 2026-08-06 11:05 – Source website

Summary

kernel security update

Details

Security Fix(es):

An out-of-bounds read flaw was found in the Linux kernel’s TeleTYpe subsystem. The issue occurs in how a user triggers a race condition using ioctls TIOCSPTLCK and TIOCGPTPEER and TIOCSTI and TCXONC with leakage of memory in the flush_to_ldisc function. This flaw allows a local user to crash the system or read unauthorized random data from memory.(CVE-2022-1462)

Dm-verity is used for extending root-of-trust to root filesystems. LoadPin builds on this property to restrict module/firmware loads to just the trusted root filesystem. Device-mapper table reloads currently allow users with root privileges to switch out the target with an equivalent dm-linear target and bypass verification till reboot. This allows root to bypass LoadPin and can be used to load untrusted and unverified kernel modules and firmware, which implies arbitrary kernel execution and persistence for peripherals that do not verify firmware updates. We recommend upgrading past commit 4caae58406f8ceb741603eee460d79bacca9b1b5(CVE-2022-2503)

A race condition was found in the Linux kernel's watch queue due to a missing lock in pipe_resize_ring(). The specific flaw exists within the handling of pipe buffers. The issue results from the lack of proper locking when performing operations on an object. This flaw allows a local user to crash the system or escalate their privileges on the system.(CVE-2022-2959)

A flaw was found in the kernels implementation of proxied virtualized TPM devices. On a system where virtualized TPM devices are configured (this is not the default) a local attacker can create a use-after-free and create a situation where it may be possible to escalate privileges on the system.

References: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=9d8e7007dc7c4d7c8366739bbcd3f5e51dcd470f(CVE-2022-2977)

The linux kernels driver for the "ASIX AX88179_178A based USB 2.0/3.0 Gigabit Ethernet Devices" contains multiple out-of-bounds reads and possible writes in the ax88179_rx_fixup() function.

References:

https://www.spinics.net/lists/stable/msg536418.html

Upstream commit: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=57bc3d3ae8c14df3ceb4e17d26ddf9eeab304581(CVE-2022-2964)

A race condition was found in the Linux kernel's IP framework for transforming packets (XFRM subsystem) when multiple calls to xfrm_probe_algs occurred simultaneously. This flaw could allow a local attacker to potentially trigger an out-of-bounds write or leak kernel heap memory by performing an out-of-bounds read and copying it into a socket.(CVE-2022-3028)

Severity

7.8 (High)


                    
                      CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References

URL

Type

	https://www.openeuler.org/en/security/safety-bull…	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2022-1462	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2022-2503	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2022-2959	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2022-2977	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2022-2964	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2022-3028	ADVISORY

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "aarch64": [
          "bpftool-5.10.0-60.54.0.82.oe2203.aarch64.rpm",
          "kernel-tools-devel-5.10.0-60.54.0.82.oe2203.aarch64.rpm",
          "kernel-tools-debuginfo-5.10.0-60.54.0.82.oe2203.aarch64.rpm",
          "kernel-5.10.0-60.54.0.82.oe2203.aarch64.rpm",
          "kernel-debugsource-5.10.0-60.54.0.82.oe2203.aarch64.rpm",
          "kernel-devel-5.10.0-60.54.0.82.oe2203.aarch64.rpm",
          "kernel-tools-5.10.0-60.54.0.82.oe2203.aarch64.rpm",
          "perf-debuginfo-5.10.0-60.54.0.82.oe2203.aarch64.rpm",
          "perf-5.10.0-60.54.0.82.oe2203.aarch64.rpm",
          "python3-perf-5.10.0-60.54.0.82.oe2203.aarch64.rpm",
          "kernel-source-5.10.0-60.54.0.82.oe2203.aarch64.rpm",
          "python3-perf-debuginfo-5.10.0-60.54.0.82.oe2203.aarch64.rpm",
          "bpftool-debuginfo-5.10.0-60.54.0.82.oe2203.aarch64.rpm",
          "kernel-headers-5.10.0-60.54.0.82.oe2203.aarch64.rpm",
          "kernel-debuginfo-5.10.0-60.54.0.82.oe2203.aarch64.rpm"
        ],
        "src": [
          "kernel-5.10.0-60.54.0.82.oe2203.src.rpm"
        ],
        "x86_64": [
          "kernel-tools-devel-5.10.0-60.54.0.82.oe2203.x86_64.rpm",
          "kernel-tools-5.10.0-60.54.0.82.oe2203.x86_64.rpm",
          "perf-5.10.0-60.54.0.82.oe2203.x86_64.rpm",
          "kernel-debugsource-5.10.0-60.54.0.82.oe2203.x86_64.rpm",
          "kernel-debuginfo-5.10.0-60.54.0.82.oe2203.x86_64.rpm",
          "perf-debuginfo-5.10.0-60.54.0.82.oe2203.x86_64.rpm",
          "python3-perf-debuginfo-5.10.0-60.54.0.82.oe2203.x86_64.rpm",
          "kernel-tools-debuginfo-5.10.0-60.54.0.82.oe2203.x86_64.rpm",
          "bpftool-debuginfo-5.10.0-60.54.0.82.oe2203.x86_64.rpm",
          "kernel-5.10.0-60.54.0.82.oe2203.x86_64.rpm",
          "kernel-headers-5.10.0-60.54.0.82.oe2203.x86_64.rpm",
          "kernel-source-5.10.0-60.54.0.82.oe2203.x86_64.rpm",
          "kernel-devel-5.10.0-60.54.0.82.oe2203.x86_64.rpm",
          "bpftool-5.10.0-60.54.0.82.oe2203.x86_64.rpm",
          "python3-perf-5.10.0-60.54.0.82.oe2203.x86_64.rpm"
        ]
      },
      "package": {
        "ecosystem": "openEuler:22.03-LTS",
        "name": "kernel",
        "purl": "pkg:rpm/openEuler/kernel\u0026distro=openEuler-22.03-LTS"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.10.0-60.54.0.82.oe2203"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "database_specific": {
    "severity": "High"
  },
  "details": "\r\n\r\nSecurity Fix(es):\r\n\r\nAn out-of-bounds read flaw was found in the Linux kernel\u2019s TeleTYpe subsystem. The issue occurs in how a user triggers a race condition using ioctls TIOCSPTLCK and TIOCGPTPEER and TIOCSTI and TCXONC with leakage of memory in the flush_to_ldisc function. This flaw allows a local user to crash the system or read unauthorized random data from memory.(CVE-2022-1462)\r\n\r\nDm-verity is used for extending root-of-trust to root filesystems. LoadPin builds on this property to restrict module/firmware loads to just the trusted root filesystem. Device-mapper table reloads currently allow users with root privileges to switch out the target with an equivalent dm-linear target and bypass verification till reboot. This allows root to bypass LoadPin and can be used to load untrusted and unverified kernel modules and firmware, which implies arbitrary kernel execution and persistence for peripherals that do not verify firmware updates. We recommend upgrading past commit 4caae58406f8ceb741603eee460d79bacca9b1b5(CVE-2022-2503)\r\n\r\nA race condition was found in the Linux kernel\u0026apos;s watch queue due to a missing lock in pipe_resize_ring(). The specific flaw exists within the handling of pipe buffers. The issue results from the lack of proper locking when performing operations on an object. This flaw allows a local user to crash the system or escalate their privileges on the system.(CVE-2022-2959)\r\n\r\nA flaw was found in the kernels implementation of proxied virtualized TPM devices.  On a system where virtualized TPM devices are configured (this is not the default) a local attacker can create a use-after-free and create a situation where it may be possible to escalate privileges on the system.\r\n\r\nReferences:\nhttps://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=9d8e7007dc7c4d7c8366739bbcd3f5e51dcd470f(CVE-2022-2977)\r\n\r\nThe linux kernels driver for the \u0026quot;ASIX AX88179_178A based USB 2.0/3.0 Gigabit Ethernet Devices\u0026quot; contains multiple out-of-bounds reads and possible writes in the ax88179_rx_fixup() function. \r\n\r\n\nReferences:\r\n\r\nhttps://www.spinics.net/lists/stable/msg536418.html\r\n\r\nUpstream commit:\nhttps://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=57bc3d3ae8c14df3ceb4e17d26ddf9eeab304581(CVE-2022-2964)\r\n\r\nA race condition was found in the Linux kernel\u0026apos;s IP framework for transforming packets (XFRM subsystem) when multiple calls to xfrm_probe_algs occurred simultaneously. This flaw could allow a local attacker to potentially trigger an out-of-bounds write or leak kernel heap memory by performing an out-of-bounds read and copying it into a socket.(CVE-2022-3028)",
  "id": "OESA-2022-1893",
  "modified": "2026-08-06T11:05:10Z",
  "published": "2022-09-07T11:05:10Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1893"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-1462"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-2503"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-2959"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-2977"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-2964"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-3028"
    }
  ],
  "schema_version": "1.7.2",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ],
  "summary": "kernel security update",
  "upstream": [
    "CVE-2022-1462",
    "CVE-2022-2503",
    "CVE-2022-2959",
    "CVE-2022-2977",
    "CVE-2022-2964",
    "CVE-2022-3028"
  ]
}

OESA-2022-1894 (CVE-2022-2977)

Vulnerability from osv_openeuler – Published: 2022-09-07 11:05 – Updated: 2026-08-06 11:05 – Source website

Summary

kernel security update

Details

Security Fix(es):

References: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=9d8e7007dc7c4d7c8366739bbcd3f5e51dcd470f(CVE-2022-2977)

The linux kernels driver for the "ASIX AX88179_178A based USB 2.0/3.0 Gigabit Ethernet Devices" contains multiple out-of-bounds reads and possible writes in the ax88179_rx_fixup() function.

References:

https://www.spinics.net/lists/stable/msg536418.html

Upstream commit: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=57bc3d3ae8c14df3ceb4e17d26ddf9eeab304581(CVE-2022-2964)

Severity

7.8 (High)


                    
                      CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References

URL

Type

	https://www.openeuler.org/en/security/safety-bull…	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2022-2977	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2022-2964	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2022-3028	ADVISORY

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "aarch64": [
          "kernel-devel-4.19.90-2209.1.0.0166.oe1.aarch64.rpm",
          "bpftool-4.19.90-2209.1.0.0166.oe1.aarch64.rpm",
          "kernel-debugsource-4.19.90-2209.1.0.0166.oe1.aarch64.rpm",
          "python3-perf-debuginfo-4.19.90-2209.1.0.0166.oe1.aarch64.rpm",
          "kernel-source-4.19.90-2209.1.0.0166.oe1.aarch64.rpm",
          "kernel-tools-debuginfo-4.19.90-2209.1.0.0166.oe1.aarch64.rpm",
          "perf-debuginfo-4.19.90-2209.1.0.0166.oe1.aarch64.rpm",
          "kernel-debuginfo-4.19.90-2209.1.0.0166.oe1.aarch64.rpm",
          "kernel-tools-4.19.90-2209.1.0.0166.oe1.aarch64.rpm",
          "kernel-tools-devel-4.19.90-2209.1.0.0166.oe1.aarch64.rpm",
          "python3-perf-4.19.90-2209.1.0.0166.oe1.aarch64.rpm",
          "python2-perf-debuginfo-4.19.90-2209.1.0.0166.oe1.aarch64.rpm",
          "perf-4.19.90-2209.1.0.0166.oe1.aarch64.rpm",
          "python2-perf-4.19.90-2209.1.0.0166.oe1.aarch64.rpm",
          "kernel-4.19.90-2209.1.0.0166.oe1.aarch64.rpm",
          "bpftool-debuginfo-4.19.90-2209.1.0.0166.oe1.aarch64.rpm"
        ],
        "src": [
          "kernel-4.19.90-2209.1.0.0166.oe1.src.rpm"
        ],
        "x86_64": [
          "kernel-4.19.90-2209.1.0.0166.oe1.x86_64.rpm",
          "kernel-devel-4.19.90-2209.1.0.0166.oe1.x86_64.rpm",
          "kernel-tools-devel-4.19.90-2209.1.0.0166.oe1.x86_64.rpm",
          "kernel-debugsource-4.19.90-2209.1.0.0166.oe1.x86_64.rpm",
          "kernel-source-4.19.90-2209.1.0.0166.oe1.x86_64.rpm",
          "perf-debuginfo-4.19.90-2209.1.0.0166.oe1.x86_64.rpm",
          "bpftool-4.19.90-2209.1.0.0166.oe1.x86_64.rpm",
          "bpftool-debuginfo-4.19.90-2209.1.0.0166.oe1.x86_64.rpm",
          "python3-perf-4.19.90-2209.1.0.0166.oe1.x86_64.rpm",
          "python2-perf-debuginfo-4.19.90-2209.1.0.0166.oe1.x86_64.rpm",
          "kernel-tools-4.19.90-2209.1.0.0166.oe1.x86_64.rpm",
          "perf-4.19.90-2209.1.0.0166.oe1.x86_64.rpm",
          "kernel-debuginfo-4.19.90-2209.1.0.0166.oe1.x86_64.rpm",
          "python2-perf-4.19.90-2209.1.0.0166.oe1.x86_64.rpm",
          "kernel-tools-debuginfo-4.19.90-2209.1.0.0166.oe1.x86_64.rpm",
          "python3-perf-debuginfo-4.19.90-2209.1.0.0166.oe1.x86_64.rpm"
        ]
      },
      "package": {
        "ecosystem": "openEuler:20.03-LTS-SP1",
        "name": "kernel",
        "purl": "pkg:rpm/openEuler/kernel\u0026distro=openEuler-20.03-LTS-SP1"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.19.90-2209.1.0.0166.oe1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "database_specific": {
    "severity": "High"
  },
  "details": "\r\n\r\nSecurity Fix(es):\r\n\r\nA flaw was found in the kernels implementation of proxied virtualized TPM devices.  On a system where virtualized TPM devices are configured (this is not the default) a local attacker can create a use-after-free and create a situation where it may be possible to escalate privileges on the system.\r\n\r\nReferences:\nhttps://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=9d8e7007dc7c4d7c8366739bbcd3f5e51dcd470f(CVE-2022-2977)\r\n\r\nThe linux kernels driver for the \u0026quot;ASIX AX88179_178A based USB 2.0/3.0 Gigabit Ethernet Devices\u0026quot; contains multiple out-of-bounds reads and possible writes in the ax88179_rx_fixup() function. \r\n\r\n\nReferences:\r\n\r\nhttps://www.spinics.net/lists/stable/msg536418.html\r\n\r\nUpstream commit:\nhttps://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=57bc3d3ae8c14df3ceb4e17d26ddf9eeab304581(CVE-2022-2964)\r\n\r\nA race condition was found in the Linux kernel\u0026apos;s IP framework for transforming packets (XFRM subsystem) when multiple calls to xfrm_probe_algs occurred simultaneously. This flaw could allow a local attacker to potentially trigger an out-of-bounds write or leak kernel heap memory by performing an out-of-bounds read and copying it into a socket.(CVE-2022-3028)",
  "id": "OESA-2022-1894",
  "modified": "2026-08-06T11:05:10Z",
  "published": "2022-09-07T11:05:10Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1894"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-2977"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-2964"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-3028"
    }
  ],
  "schema_version": "1.7.2",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ],
  "summary": "kernel security update",
  "upstream": [
    "CVE-2022-2977",
    "CVE-2022-2964",
    "CVE-2022-3028"
  ]
}

OESA-2022-1895 (CVE-2022-2977)

Vulnerability from osv_openeuler – Published: 2022-09-07 11:05 – Updated: 2026-08-06 11:05 – Source website

Summary

kernel security update

Details

Security Fix(es):

References: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=9d8e7007dc7c4d7c8366739bbcd3f5e51dcd470f(CVE-2022-2977)

The linux kernels driver for the "ASIX AX88179_178A based USB 2.0/3.0 Gigabit Ethernet Devices" contains multiple out-of-bounds reads and possible writes in the ax88179_rx_fixup() function.

References:

https://www.spinics.net/lists/stable/msg536418.html

Upstream commit: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=57bc3d3ae8c14df3ceb4e17d26ddf9eeab304581(CVE-2022-2964)

Severity

7.8 (High)


                    
                      CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References

URL

Type

	https://www.openeuler.org/en/security/safety-bull…	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2022-2977	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2022-2964	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2022-3028	ADVISORY

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "aarch64": [
          "kernel-debugsource-4.19.90-2209.1.0.0166.oe1.aarch64.rpm",
          "perf-4.19.90-2209.1.0.0166.oe1.aarch64.rpm",
          "bpftool-4.19.90-2209.1.0.0166.oe1.aarch64.rpm",
          "python3-perf-debuginfo-4.19.90-2209.1.0.0166.oe1.aarch64.rpm",
          "kernel-tools-devel-4.19.90-2209.1.0.0166.oe1.aarch64.rpm",
          "kernel-4.19.90-2209.1.0.0166.oe1.aarch64.rpm",
          "python3-perf-4.19.90-2209.1.0.0166.oe1.aarch64.rpm",
          "kernel-devel-4.19.90-2209.1.0.0166.oe1.aarch64.rpm",
          "kernel-source-4.19.90-2209.1.0.0166.oe1.aarch64.rpm",
          "kernel-debuginfo-4.19.90-2209.1.0.0166.oe1.aarch64.rpm",
          "kernel-tools-4.19.90-2209.1.0.0166.oe1.aarch64.rpm",
          "kernel-tools-debuginfo-4.19.90-2209.1.0.0166.oe1.aarch64.rpm",
          "python2-perf-4.19.90-2209.1.0.0166.oe1.aarch64.rpm",
          "perf-debuginfo-4.19.90-2209.1.0.0166.oe1.aarch64.rpm",
          "python2-perf-debuginfo-4.19.90-2209.1.0.0166.oe1.aarch64.rpm",
          "bpftool-debuginfo-4.19.90-2209.1.0.0166.oe1.aarch64.rpm"
        ],
        "src": [
          "kernel-4.19.90-2209.1.0.0166.oe1.src.rpm"
        ],
        "x86_64": [
          "perf-debuginfo-4.19.90-2209.1.0.0166.oe1.x86_64.rpm",
          "kernel-tools-devel-4.19.90-2209.1.0.0166.oe1.x86_64.rpm",
          "kernel-tools-debuginfo-4.19.90-2209.1.0.0166.oe1.x86_64.rpm",
          "python2-perf-4.19.90-2209.1.0.0166.oe1.x86_64.rpm",
          "kernel-tools-4.19.90-2209.1.0.0166.oe1.x86_64.rpm",
          "kernel-devel-4.19.90-2209.1.0.0166.oe1.x86_64.rpm",
          "kernel-debuginfo-4.19.90-2209.1.0.0166.oe1.x86_64.rpm",
          "python3-perf-4.19.90-2209.1.0.0166.oe1.x86_64.rpm",
          "perf-4.19.90-2209.1.0.0166.oe1.x86_64.rpm",
          "kernel-4.19.90-2209.1.0.0166.oe1.x86_64.rpm",
          "python3-perf-debuginfo-4.19.90-2209.1.0.0166.oe1.x86_64.rpm",
          "kernel-debugsource-4.19.90-2209.1.0.0166.oe1.x86_64.rpm",
          "bpftool-debuginfo-4.19.90-2209.1.0.0166.oe1.x86_64.rpm",
          "kernel-source-4.19.90-2209.1.0.0166.oe1.x86_64.rpm",
          "python2-perf-debuginfo-4.19.90-2209.1.0.0166.oe1.x86_64.rpm",
          "bpftool-4.19.90-2209.1.0.0166.oe1.x86_64.rpm"
        ]
      },
      "package": {
        "ecosystem": "openEuler:20.03-LTS-SP3",
        "name": "kernel",
        "purl": "pkg:rpm/openEuler/kernel\u0026distro=openEuler-20.03-LTS-SP3"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.19.90-2209.1.0.0166.oe1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "database_specific": {
    "severity": "High"
  },
  "details": "\r\n\r\nSecurity Fix(es):\r\n\r\nA flaw was found in the kernels implementation of proxied virtualized TPM devices.  On a system where virtualized TPM devices are configured (this is not the default) a local attacker can create a use-after-free and create a situation where it may be possible to escalate privileges on the system.\r\n\r\nReferences:\nhttps://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=9d8e7007dc7c4d7c8366739bbcd3f5e51dcd470f(CVE-2022-2977)\r\n\r\nThe linux kernels driver for the \u0026quot;ASIX AX88179_178A based USB 2.0/3.0 Gigabit Ethernet Devices\u0026quot; contains multiple out-of-bounds reads and possible writes in the ax88179_rx_fixup() function. \r\n\r\n\nReferences:\r\n\r\nhttps://www.spinics.net/lists/stable/msg536418.html\r\n\r\nUpstream commit:\nhttps://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=57bc3d3ae8c14df3ceb4e17d26ddf9eeab304581(CVE-2022-2964)\r\n\r\nA race condition was found in the Linux kernel\u0026apos;s IP framework for transforming packets (XFRM subsystem) when multiple calls to xfrm_probe_algs occurred simultaneously. This flaw could allow a local attacker to potentially trigger an out-of-bounds write or leak kernel heap memory by performing an out-of-bounds read and copying it into a socket.(CVE-2022-3028)",
  "id": "OESA-2022-1895",
  "modified": "2026-08-06T11:05:10Z",
  "published": "2022-09-07T11:05:10Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1895"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-2977"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-2964"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-3028"
    }
  ],
  "schema_version": "1.7.2",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ],
  "summary": "kernel security update",
  "upstream": [
    "CVE-2022-2977",
    "CVE-2022-2964",
    "CVE-2022-3028"
  ]
}

RHSA-2023:0101

Vulnerability from csaf_opensuse - Published: 2023-01-12 00:00 - Updated: 2026-09-20 11:25

Summary

security update for kernel

Severity

Important

Scope

3 vulnerabilities in this advisory, including CVE-2022-2964.

CVE-2022-2964

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Recommended: 20 products

Open the full advisory

RHSA-2023:0334

Vulnerability from csaf_opensuse - Published: 2023-01-23 00:00 - Updated: 2026-09-20 11:26

Summary

security update for kernel

Severity

Important

Scope

8 vulnerabilities in this advisory, including CVE-2022-2964.

CVE-2022-2964

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Recommended: 22 products

Open the full advisory

RHSA-2023:0114

Vulnerability from csaf_redhat - Published: 2023-01-12 09:16 - Updated: 2026-06-28 12:38

Summary

Red Hat Security Advisory: kernel-rt security and bug fix update

Severity

Important

Scope

2 vulnerabilities in this advisory, including CVE-2022-2964.

CVE-2022-2964

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Fixed: 30 products

https://access.redhat.com/errata/RHSA-2023:0114

Open the full advisory

RHSA-2023:0123

Vulnerability from csaf_redhat - Published: 2023-01-12 09:22 - Updated: 2026-06-28 12:38

Summary

Red Hat Security Advisory: kpatch-patch security update

Severity

Important

Scope

2 vulnerabilities in this advisory, including CVE-2022-2964.

CVE-2022-2964

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Fixed: 7 products

https://access.redhat.com/errata/RHSA-2023:0123

Open the full advisory

RHSA-2023:0300

Vulnerability from csaf_redhat - Published: 2023-01-23 15:23 - Updated: 2026-06-28 12:38

Summary

Red Hat Security Advisory: kernel-rt security and bug fix update

Severity

Important

Scope

6 vulnerabilities in this advisory, including CVE-2022-2964.

CVE-2022-2964

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Fixed: 30 products

https://access.redhat.com/errata/RHSA-2023:0300

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2022-2964 (GCVE-0-2022-2964)

ICSA-25-105-08

NCSC-2025-0382

OESA-2022-1893 (CVE-2022-1462)

OESA-2022-1894 (CVE-2022-2977)

OESA-2022-1895 (CVE-2022-2977)

RHSA-2023:0101

RHSA-2023:0334

RHSA-2023:0114

RHSA-2023:0123

RHSA-2023:0300

Tags

Sightings

Nomenclature

Related by attack behaviour