kernel: net: atlantic: fix aq_vec index out of range error

🗓️ 09 Jul 2025 00:50:20Reported by RedHatType

redhat🔗 access.redhat.com👁 17 Views

Linux kernel Aquantia Atlantic driver has out-of-bounds access due to poor loop index checks, causing denial.

Reporter	Title	Published	Views	Family All 253
AstraLinux	Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15	5 Oct 202611:39	–	astralinux
BDU FSTEC	aQuantia Atlantic driver Network Information Disclosure	16 Mar 202600:00	–	bdu_fstec
Tenable Nessus	CentOS Linux 7.9 [CIQ] Security Update: bpftool / bpftool-debuginfo / kernel / kernel-abi-whitelists / etc Multiple Vulnerabilities (ciqsa-2026_0647)	1 Oct 202600:00	–	nessus
Tenable Nessus	Rocky Linux 8.6 [CIQ] Security Update: bpftool / bpftool-debuginfo / kernel / kernel-abi-stablelists / etc Multiple Vulnerabilities (ciqsa-2026_0865)	1 Oct 202600:00	–	nessus
Tenable Nessus	Rocky Linux 8 [CIQ] Security Update: bpftool / bpftool-debuginfo / kernel / kernel-abi-stablelists / etc Multiple Vulnerabilities (ciqsa-2026_0630)	1 Oct 202600:00	–	nessus
Tenable Nessus	Rocky Linux 9.2 [CIQ] Security Update: bpftool / bpftool-debuginfo / kernel / kernel-abi-stablelists / etc Multiple Vulnerabilities (ciqsa-2026_0614)	1 Oct 202600:00	–	nessus
Tenable Nessus	Rocky Linux 9.2 [CIQ] Security Update: bpftool / bpftool-debuginfo / kernel / kernel-64k / kernel-64k-core / etc Multiple Vulnerabilities (ciqsa-2026_0948)	1 Oct 202600:00	–	nessus
Tenable Nessus	Rocky Linux 9.2 [CIQ] Security Update: bpftool / bpftool-debuginfo Multiple Vulnerabilities (ciqsa-2026_1242)	1 Oct 202600:00	–	nessus
Tenable Nessus	Rocky Linux 9.2 [CIQ] Security Update: bpftool-debuginfo Multiple Vulnerabilities (ciqsa-2026_1243)	1 Oct 202600:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP10 : kernel (EulerOS-SA-2025-2100)	10 Sep 202500:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Red Hat Enterprise Linux	9.2	aarch64	bpftool	7.0.0-284.124.1.el9_2	bpftool-7.0.0-284.124.1.el9_2.aarch64.rpm
Red Hat Enterprise Linux	9.2	ppc64le	bpftool	7.0.0-284.124.1.el9_2	bpftool-7.0.0-284.124.1.el9_2.ppc64le.rpm
Red Hat Enterprise Linux	9.2	s390x	bpftool	7.0.0-284.124.1.el9_2	bpftool-7.0.0-284.124.1.el9_2.s390x.rpm
Red Hat Enterprise Linux	9.2	x86_64	bpftool	7.0.0-284.124.1.el9_2	bpftool-7.0.0-284.124.1.el9_2.x86_64.rpm
Red Hat Enterprise Linux	9.2	aarch64	bpftool-debuginfo	7.0.0-284.124.1.el9_2	bpftool-debuginfo-7.0.0-284.124.1.el9_2.aarch64.rpm
Red Hat Enterprise Linux	9.2	ppc64le	bpftool-debuginfo	7.0.0-284.124.1.el9_2	bpftool-debuginfo-7.0.0-284.124.1.el9_2.ppc64le.rpm
Red Hat Enterprise Linux	9.2	s390x	bpftool-debuginfo	7.0.0-284.124.1.el9_2	bpftool-debuginfo-7.0.0-284.124.1.el9_2.s390x.rpm
Red Hat Enterprise Linux	9.2	x86_64	bpftool-debuginfo	7.0.0-284.124.1.el9_2	bpftool-debuginfo-7.0.0-284.124.1.el9_2.x86_64.rpm
Red Hat Enterprise Linux	9.2	aarch64	kernel	5.14.0-284.124.1.el9_2	kernel-5.14.0-284.124.1.el9_2.aarch64.rpm
Red Hat Enterprise Linux	9.2	ppc64le	kernel	5.14.0-284.124.1.el9_2	kernel-5.14.0-284.124.1.el9_2.ppc64le.rpm

Source	Link
access	www.access.redhat.com/security/cve/CVE-2022-50066
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
lore	www.lore.kernel.org/linux-cve-announce/2025061851-CVE-2022-50066-a2ad@gregkh/T
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-50066
cve	www.cve.org/CVERecord

14 Oct 2026 17:25Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.17.8

EPSS0.00202

Aquantia Atlantic out of bounds access loop index checks Linux kernel denial of service