First published: Wed Feb 26 2025(Updated: )
In the Linux kernel, the following vulnerability has been resolved: iwlwifi: mei: fix potential NULL-ptr deref If SKB allocation fails, continue rather than using the NULL pointer. Coverity CID: 1497650
Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Affected Software | Affected Version | How to fix |
---|---|---|
Linux Kernel |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2022-49417 is considered to be of low severity as it relates to a potential null pointer dereference in the Linux kernel's iwlwifi driver.
To fix CVE-2022-49417, update the Linux kernel to the latest stable version where the vulnerability has been resolved.
CVE-2022-49417 can potentially lead to denial of service if exploitation occurs due to the null pointer dereference.
CVE-2022-49417 affects multiple versions of the Linux kernel prior to the fix being applied in the stable releases.
The key vulnerability in CVE-2022-49417 is related to the improper handling of memory allocation failures in the iwlwifi driver.