The Linux kernel net1080 USB network driver contained a vulnerability where the function net1080_rx_fixup() would read a pad byte at skb->data[packet_len] without first confirming that packet_len was less than skb->len. Since packet_len was only bounded against NC_MAX_PACKET, a malicious NetChip 1080 device could send a short frame advertising a large even packet_len, causing an out-of-bounds read and triggering a kernel slab-out-of-bounds error detected by KASAN. The fix involves rejecting frames where packet_len is greater than or equal to skb->len before reading the pad byte.

This vulnerability allows a malicious USB network device to cause a kernel slab-out-of-bounds read, which can lead to denial of service (kernel crash) and potentially other impacts related to kernel memory safety. The CVSS 3.1 vector indicates high confidentiality impact and high availability impact, with no privileges required and no user interaction needed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. The vulnerability description indicates that a fix has been implemented by validating packet_len before accessing the pad byte, so applying the latest Linux kernel updates that include this fix is recommended once available.