CVE-2022-49023: wifi: cfg80211: fix buffer overflow in elem comparison
In the Linux kernel, the following vulnerability has been resolved:
wifi: cfg80211: fix buffer overflow in elem comparison
For vendor elements, the code here assumes that 5 octets are present without checking. Since the element itself is already checked to fit, we only need to check the length.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-49023?
CVE-2022-49023 has been classified as a potential buffer overflow vulnerability in the Linux kernel.
How does CVE-2022-49023 affect the Linux kernel?
CVE-2022-49023 can lead to a buffer overflow during element comparison in vendor elements, potentially compromising system integrity.
How do I fix CVE-2022-49023?
To fix CVE-2022-49023, update the Linux kernel to a version that addresses this vulnerability.
Which Linux kernel versions are affected by CVE-2022-49023?
CVE-2022-49023 affects multiple Linux kernel versions including those between 5.1 and 6.1-rc7.
When was CVE-2022-49023 discovered?
CVE-2022-49023 was reported and addressed in late 2022.