PT-2025-25992 · Linux+4 · Linux Kernel+4
Published
2022-08-08
·
Updated
2025-09-12
·
CVE-2022-50066
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 5.19.0
Description
The issue is related to an out-of-range error in the
aq vec index in the Linux kernel's Atlantic driver. The final update statement of a for loop exceeds the array range, and the dereference of self->aq vec[i] is not checked, leading to an index out-of-range error. This error occurs in the aq nic.c file at line 1404. The issue has been resolved by fixing the coding style in the for loop.Recommendations
For Linux kernel versions prior to 5.19.0, update to version 5.19.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the vulnerable
aq vec index to minimize the risk of exploitation.Exploit
Fix
Improper Validation of Array Index
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Astra Linux
Centos
Linux Kernel
Red Hat
Suse