Linux Kernel asix Driver Error Handling Vulnerability

A vulnerability in the Linux kernel's asix driver has been addressed, which involved improper error handling of USB read errors. The issue arose because the asix_read_cmd() function sometimes read fewer bytes than requested, leading to the potential use of uninitialized values. The vulnerability has been resolved by adding sanity checks to ensure that the number of bytes read meets the requested amount, and by implementing the necessary error handling throughout the driver code.

Impact

The vulnerability could lead to the use of uninitialized values, which may cause undefined behavior in the driver.