CVE-2022-49022: wifi: mac8021: fix possible oob access in ieee80211_get_rate_duration
In the Linux kernel, the following vulnerability has been resolved:
wifi: mac8021: fix possible oob access in ieee80211getrateduration
Fix possible out-of-bound access in ieee80211getrateduration routine as reported by the following UBSAN report:
UBSAN: array-index-out-of-bounds in net/mac80211/airtime.c:455:47 index 15 is out of range for type 'u16 [12]' CPU: 2 PID: 217 Comm: kworker/u32:10 Not tainted 6.1.0-060100rc3-generic Hardware name: Acer Aspire TC-281/Aspire TC-281, BIOS R01-A2 07/18/2017 Workqueue: mt76 mt76utxstatusdata [mt76usb] Call Trace: <TASK> showstack+0x4e/0x61 dumpstacklvl+0x4a/0x6f dumpstack+0x10/0x18 ubsanepilogue+0x9/0x43 ubsanhandleoutofbounds.cold+0x42/0x47 ieee80211getrateduration.constprop.0+0x22f/0x2a0 [mac80211] ? ieee80211txstatusext+0x32e/0x640 [mac80211] ieee80211calcrxairtime+0xda/0x120 [mac80211] ieee80211calctxairtime+0xb4/0x100 [mac80211] mt76x02sendtxstatus+0x266/0x480 [mt76x02lib] mt76x02txstatusdata+0x52/0x80 [mt76x02lib] mt76utxstatusdata+0x67/0xd0 [mt76usb] processonework+0x225/0x400 workerthread+0x50/0x3e0 ? processonework+0x400/0x400 kthread+0xe9/0x110 ? kthreadcompleteandexit+0x20/0x20 retfromfork+0x22/0x30
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-49022?
CVE-2022-49022 is classified as a moderate severity vulnerability in the Linux kernel.
How do I fix CVE-2022-49022?
To fix CVE-2022-49022, ensure that your system is updated to a Linux kernel version beyond 5.10.158, 5.15.82, 6.0.12, or the specific 6.1 release candidates.
Which versions of the Linux kernel are affected by CVE-2022-49022?
CVE-2022-49022 affects Linux kernel versions from 5.5 up to and including 5.10.158, 5.11 up to and including 5.15.82, and from 5.16 up to and including 6.0.12, as well as the 6.1 release candidates.
What type of vulnerability is CVE-2022-49022?
CVE-2022-49022 is an out-of-bounds access vulnerability related to the ieee80211_get_rate_duration function in the Linux kernel.
What could happen if CVE-2022-49022 is exploited?
Exploitation of CVE-2022-49022 could potentially lead to system instability or crashes due to out-of-bounds memory access.