< Back

CVE-2022-50066

Updated on 18 Jun 2025

Severity

7.8 High severity

Details

CVSS score
7.8
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE ID
Links
NISTCIRCLRHELUbuntu

Overview

About vulnerability

In the Linux kernel, the following vulnerability has been resolved:

net: atlantic: fix aq_vec index out of range error

The final update statement of the for loop exceeds the array range, the dereference of self->aq_vec[i] is not checked and then leads to the index out of range error. Also fixed this kind of coding style in other for loop.

[ 97.937604] UBSAN: array-index-out-of-bounds in drivers/net/ethernet/aquantia/atlantic/aq_nic.c:1404:48 [ 97.937607] index 8 is out of range for type ‘aq_vec_s *[8]’ [ 97.937608] CPU: 38 PID: 3767 Comm: kworker/u256:18 Not tainted 5.19.0+ #2 [ 97.937610] Hardware name: Dell Inc. Precision 7865 Tower/, BIOS 1.0.0 06/12/2022 [ 97.937611] Workqueue: events_unbound async_run_entry_fn [ 97.937616] Call Trace: [ 97.937617] <TASK> [ 97.937619] dump_stack_lvl+0x49/0x63 [ 97.937624] dump_stack+0x10/0x16 [ 97.937626] ubsan_epilogue+0x9/0x3f [ 97.937627] __ubsan_handle_out_of_bounds.cold+0x44/0x49 [ 97.937629] ? __scm_send+0x348/0x440 [ 97.937632] ? aq_vec_stop+0x72/0x80 [atlantic] [ 97.937639] aq_nic_stop+0x1b6/0x1c0 [atlantic] [ 97.937644] aq_suspend_common+0x88/0x90 [atlantic] [ 97.937648] aq_pm_suspend_poweroff+0xe/0x20 [atlantic] [ 97.937653] pci_pm_suspend+0x7e/0x1a0 [ 97.937655] ? pci_pm_suspend_noirq+0x2b0/0x2b0 [ 97.937657] dpm_run_callback+0x54/0x190 [ 97.937660] __device_suspend+0x14c/0x4d0 [ 97.937661] async_suspend+0x23/0x70 [ 97.937663] async_run_entry_fn+0x33/0x120 [ 97.937664] process_one_work+0x21f/0x3f0 [ 97.937666] worker_thread+0x4a/0x3c0 [ 97.937668] ? process_one_work+0x3f0/0x3f0 [ 97.937669] kthread+0xf0/0x120 [ 97.937671] ? kthread_complete_and_exit+0x20/0x20 [ 97.937672] ret_from_fork+0x22/0x30 [ 97.937676] </TASK>

v2. fixed “warning: variable ‘aq_vec’ set but not used”

v3. simplified a for loop

Details

Affected product:
AlmaLinux 9.2 ESU , Amazon Linux 2 ELS , CentOS 6 ELS , CentOS 7 ELS , CentOS 8.4 ELS , CentOS 8.5 ELS , CentOS Stream 8 ELS , CloudLinux 7 ELS , Debian 10 ELS , Oracle Linux 6 ELS , Oracle Linux 7 ELS , RHEL 7 ELS , TuxCare 9.6 ESU , TuxCare 9.8 ESU , Ubuntu 16.04 ELS , Ubuntu 18.04 ELS , Ubuntu 20.04 ELS
Affected packages:
kernel @ 3.10.0 (+17 more)

Fixes

KernelCare state

Live-patch status from KernelCare for each operating system.

Operating system Status Covered kernels
AlmaLinux 9.2 ESU Released
3 kernels
  • 5.14.0-284.1101.el9_2.tuxcare.7.els14
  • 5.14.0-284.1101.el9_2.tuxcare.7.els15
  • 5.14.0-284.1101.el9_2.tuxcare.7.els13
CentOS 7 Released
35 kernels
  • 3.10.0-1160.el7
  • 3.10.0-1160.2.2.el7
  • 3.10.0-1160.2.1.el7
  • 3.10.0-1160.6.1.el7
  • 3.10.0-1160.11.1.el7
  • 3.10.0-1160.15.2.el7
  • 3.10.0-1160.21.1.el7
  • 3.10.0-1160.24.1.el7
  • 3.10.0-1160.25.1.el7
  • 3.10.0-1160.31.1.el7
  • 3.10.0-1160.36.2.el7
  • 3.10.0-1160.41.1.el7
  • 3.10.0-1160.42.2.el7
  • 3.10.0-1160.45.1.el7
  • 3.10.0-1160.53.1.el7
  • 3.10.0-1160.49.1.el7
  • 3.10.0-1160.59.1.el7
  • 3.10.0-1160.62.1.el7
  • 3.10.0-1160.66.1.el7
  • 3.10.0-1160.71.1.el7
  • 3.10.0-1160.76.1.el7
  • 3.10.0-1160.80.1.el7
  • 3.10.0-1160.81.1.el7
  • 3.10.0-1160.83.1.el7
  • 3.10.0-1160.88.1.el7
  • 3.10.0-1160.90.1.el7
  • 3.10.0-1160.92.1.el7
  • 3.10.0-1160.95.1.el7
  • 3.10.0-1160.99.1.el7
  • 3.10.0-1160.102.1.el7
  • 3.10.0-1160.105.1.el7
  • 3.10.0-1160.108.1.el7
  • 3.10.0-1160.114.2.el7
  • 3.10.0-1160.118.1.el7
  • 3.10.0-1160.119.1.el7
CentOS 7 ELS Released
19 kernels
  • 3.10.0-1160.119.1.el7.tuxcare.els10
  • 3.10.0-1160.119.1.el7.tuxcare.els4
  • 3.10.0-1160.119.1.el7.tuxcare.els6
  • 3.10.0-1160.119.1.el7.tuxcare.els15
  • 3.10.0-1160.119.1.el7.tuxcare.els5
  • 3.10.0-1160.119.1.el7.tuxcare.els3
  • 3.10.0-1160.119.1.el7.tuxcare.els14
  • 3.10.0-1160.119.1.el7.tuxcare.els16
  • 3.10.0-1160.119.1.el7.tuxcare.els13
  • 3.10.0-1160.119.1.el7.tuxcare.els7
  • 3.10.0-1160.119.1.el7.tuxcare.els12
  • 3.10.0-1160.119.1.el7.tuxcare.els9
  • 3.10.0-1160.119.1.el7.tuxcare.els8
  • 3.10.0-1160.119.1.el7.tuxcare.els17
  • 3.10.0-1160.119.1.el7.tuxcare.els18
  • 3.10.0-1160.119.1.el7.tuxcare.els19
  • 3.10.0-1160.119.1.el7.tuxcare.els20
  • 3.10.0-1160.119.1.el7.tuxcare.els21
  • 3.10.0-1160.119.1.el7.tuxcare.els22
CentOS 7 plus Released
23 kernels
  • 3.10.0-1160.el7.centos.plus
  • 3.10.0-1160.6.1.el7.centos.plus
  • 3.10.0-1160.2.2.el7.centos.plus
  • 3.10.0-1160.11.1.el7.centos.plus
  • 3.10.0-1160.15.2.el7.centos.plus
  • 3.10.0-1160.21.1.el7.centos.plus
  • 3.10.0-1160.2.1.el7.centos.plus
  • 3.10.0-1160.24.1.el7.centos.plus
  • 3.10.0-1160.25.1.el7.centos.plus
  • 3.10.0-1160.31.1.el7.centos.plus
  • 3.10.0-1160.36.2.el7.centos.plus
  • 3.10.0-1160.41.1.el7.centos.plus
  • 3.10.0-1160.42.2.el7.centos.plus
  • 3.10.0-1160.45.1.el7.centos.plus
  • 3.10.0-1160.49.1.el7.centos.plus
  • 3.10.0-1160.53.1.el7.centos.plus
  • 3.10.0-1160.59.1.el7.centos.plus
  • 3.10.0-1160.62.1.el7.centos.plus
  • 3.10.0-1160.76.1.el7.centos.plus
  • 3.10.0-1160.80.1.el7.centos.plus
  • 3.10.0-1160.81.1.el7.centos.plus
  • 3.10.0-1160.83.1.el7.centos.plus
  • 3.10.0-1160.88.1.el7.centos.plus
CloudLinux OS 6h Released
8 kernels
  • 3.10.0-962.3.2.lve1.5.80.el6h
  • 3.10.0-962.3.2.lve1.5.81.el6h
  • 3.10.0-962.3.2.lve1.5.84.el6h
  • 3.10.0-962.3.2.lve1.5.82.el6h
  • 3.10.0-962.3.2.lve1.5.83.el6h
  • 3.10.0-962.3.2.lve1.5.85.el6h
  • 3.10.0-962.3.2.lve1.5.87.el6h
  • 3.10.0-962.3.2.lve1.5.86.el6h
CloudLinux OS 7 Released
8 kernels
  • 3.10.0-962.3.2.lve1.5.80.el7
  • 3.10.0-962.3.2.lve1.5.81.el7
  • 3.10.0-962.3.2.lve1.5.82.el7
  • 3.10.0-962.3.2.lve1.5.83.el7
  • 3.10.0-962.3.2.lve1.5.84.el7
  • 3.10.0-962.3.2.lve1.5.85.el7
  • 3.10.0-962.3.2.lve1.5.86.el7
  • 3.10.0-962.3.2.lve1.5.87.el7
Oracle Linux 7 Released
50 kernels
  • 3.10.0-1160.el7
  • 3.10.0-1160.2.2.el7
  • 3.10.0-1160.2.1.el7
  • 3.10.0-1160.6.1.el7
  • 3.10.0-1160.11.1.el7
  • 3.10.0-1160.15.2.el7
  • 3.10.0-1160.21.1.el7
  • 3.10.0-1160.24.1.el7
  • 3.10.0-1160.25.1.el7
  • 3.10.0-1160.31.1.el7
  • 3.10.0-1160.36.2.el7
  • 3.10.0-1160.41.1.el7
  • 3.10.0-1160.42.2.el7
  • 3.10.0-1160.45.1.el7
  • 3.10.0-1160.21.1.0.1.el7
  • 3.10.0-1160.42.2.0.1.el7
  • 3.10.0-1160.49.1.el7
  • 3.10.0-1160.45.1.0.1.el7
  • 3.10.0-1160.53.1.el7
  • 3.10.0-1160.59.1.el7
  • 3.10.0-1160.62.1.el7
  • 3.10.0-1160.66.1.el7
  • 3.10.0-1160.66.1.0.2.el7
  • 3.10.0-1160.71.1.0.1.el7
  • 3.10.0-1160.76.1.0.1.el7
  • 3.10.0-1160.80.1.0.1.el7
  • 3.10.0-1160.81.1.0.1.el7
  • 3.10.0-1160.11.1.0.1.el7
  • 3.10.0-1160.15.2.0.1.el7
  • 3.10.0-1160.24.1.0.1.el7
  • 3.10.0-1160.25.1.0.1.el7
  • 3.10.0-1160.31.1.0.1.el7
  • 3.10.0-1160.62.1.0.2.el7
  • 3.10.0-1160.76.1.0.2.el7
  • 3.10.0-1160.83.1.0.1.el7
  • 3.10.0-1160.88.1.0.1.el7
  • 3.10.0-1160.90.1.0.1.el7
  • 3.10.0-1160.92.1.0.1.el7
  • 3.10.0-1160.95.1.0.1.el7
  • 3.10.0-1160.99.1.0.1.el7
  • 3.10.0-1160.102.1.0.1.el7
  • 3.10.0-1160.105.1.0.1.el7
  • 3.10.0-1160.108.1.0.1.el7
  • 3.10.0-1160.114.2.0.1.el7
  • 3.10.0-1160.118.1.0.1.el7
  • 3.10.0-1160.119.1.0.1.el7
  • 3.10.0-1160.119.1.0.2.el7
  • 3.10.0-1160.119.1.0.3.el7
  • 3.10.0-1160.119.1.0.4.el7
  • 3.10.0-1160.119.1.0.5.el7
RHEL 7 Released
43 kernels
  • 3.10.0-1160.123.1.el7
  • 3.10.0-1160.125.1.el7
  • 3.10.0-1160.132.1.el7
  • 3.10.0-1160.133.1.el7
  • 3.10.0-1160.134.1.el7
  • 3.10.0-1160.135.1.el7
  • 3.10.0-1160.128.1.el7
  • 3.10.0-1160.129.1.el7
  • 3.10.0-1160.el7
  • 3.10.0-1160.2.2.el7
  • 3.10.0-1160.2.1.el7
  • 3.10.0-1160.6.1.el7
  • 3.10.0-1160.11.1.el7
  • 3.10.0-1160.15.2.el7
  • 3.10.0-1160.21.1.el7
  • 3.10.0-1160.24.1.el7
  • 3.10.0-1160.25.1.el7
  • 3.10.0-1160.31.1.el7
  • 3.10.0-1160.36.2.el7
  • 3.10.0-1160.41.1.el7
  • 3.10.0-1160.42.2.el7
  • 3.10.0-1160.45.1.el7
  • 3.10.0-1160.49.1.el7
  • 3.10.0-1160.53.1.el7
  • 3.10.0-1160.59.1.el7
  • 3.10.0-1160.62.1.el7
  • 3.10.0-1160.66.1.el7
  • 3.10.0-1160.71.1.el7
  • 3.10.0-1160.76.1.el7
  • 3.10.0-1160.80.1.el7
  • 3.10.0-1160.81.1.el7
  • 3.10.0-1160.83.1.el7
  • 3.10.0-1160.88.1.el7
  • 3.10.0-1160.90.1.el7
  • 3.10.0-1160.92.1.el7
  • 3.10.0-1160.95.1.el7
  • 3.10.0-1160.99.1.el7
  • 3.10.0-1160.102.1.el7
  • 3.10.0-1160.105.1.el7
  • 3.10.0-1160.108.1.el7
  • 3.10.0-1160.114.2.el7
  • 3.10.0-1160.118.1.el7
  • 3.10.0-1160.119.1.el7
RHEL 8 Planned —
RHEL8 EUS 8.6 Released
43 kernels
  • 4.18.0-372.51.1.el8_6
  • 4.18.0-372.46.1.el8_6
  • 4.18.0-372.41.1.el8_6
  • 4.18.0-372.36.1.el8_6
  • 4.18.0-372.52.1.el8_6
  • 4.18.0-372.57.1.el8_6
  • 4.18.0-372.64.1.el8_6
  • 4.18.0-372.70.1.el8_6
  • 4.18.0-372.75.1.el8_6
  • 4.18.0-372.80.1.el8_6
  • 4.18.0-372.87.1.el8_6
  • 4.18.0-372.91.1.el8_6
  • 4.18.0-372.93.1.el8_6
  • 4.18.0-372.95.1.el8_6
  • 4.18.0-372.98.1.el8_6
  • 4.18.0-372.100.1.el8_6
  • 4.18.0-372.102.1.el8_6
  • 4.18.0-372.105.1.el8_6
  • 4.18.0-372.107.1.el8_6
  • 4.18.0-372.111.1.el8_6
  • 4.18.0-372.118.1.el8_6
  • 4.18.0-372.119.1.el8_6
  • 4.18.0-372.113.1.el8_6
  • 4.18.0-372.109.1.el8_6
  • 4.18.0-372.115.1.el8_6
  • 4.18.0-372.121.1.el8_6
  • 4.18.0-372.123.1.el8_6
  • 4.18.0-372.124.1.el8_6
  • 4.18.0-372.125.1.el8_6
  • 4.18.0-372.126.1.el8_6
  • 4.18.0-372.127.1.el8_6
  • 4.18.0-372.129.1.el8_6
  • 4.18.0-372.131.1.el8_6
  • 4.18.0-372.133.1.el8_6
  • 4.18.0-372.134.1.el8_6
  • 4.18.0-372.137.1.el8_6
  • 4.18.0-372.139.1.el8_6
  • 4.18.0-372.141.1.el8_6
  • 4.18.0-372.142.1.el8_6
  • 4.18.0-372.143.1.el8_6
  • 4.18.0-372.145.1.el8_6
  • 4.18.0-372.149.1.el8_6
  • 4.18.0-372.150.1.el8_6
RHEL 9 Will Not Fix —
Ubuntu 22.04 In Progress —