CVE-2022-49022
- Source
- https://cve.org/CVERecord?id=CVE-2022-49022
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-49022.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2022-49022
- Downstream
- Related
- Published
- 2024-10-21T20:06:29.239Z
- Modified
- 2026-04-11T12:43:27.862767Z
- Summary
- wifi: mac8021: fix possible oob access in ieee80211_get_rate_duration
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
wifi: mac8021: fix possible oob access in ieee80211getrate_duration
Fix possible out-of-bound access in ieee80211getrate_duration routine as reported by the following UBSAN report:
UBSAN: array-index-out-of-bounds in net/mac80211/airtime.c:455:47 index 15 is out of range for type 'u16 [12]' CPU: 2 PID: 217 Comm: kworker/u32:10 Not tainted 6.1.0-060100rc3-generic Hardware name: Acer Aspire TC-281/Aspire TC-281, BIOS R01-A2 07/18/2017 Workqueue: mt76 mt76utxstatusdata [mt76usb] Call Trace: <TASK> showstack+0x4e/0x61 dumpstacklvl+0x4a/0x6f dumpstack+0x10/0x18 ubsan_epilogue+0x9/0x43 __ubsanhandleoutofbounds.cold+0x42/0x47 ieee80211getrateduration.constprop.0+0x22f/0x2a0 [mac80211] ? ieee80211txstatusext+0x32e/0x640 [mac80211] ieee80211calcrxairtime+0xda/0x120 [mac80211] ieee80211calctxairtime+0xb4/0x100 [mac80211] mt76x02sendtxstatus+0x266/0x480 [mt76x02lib] mt76x02txstatusdata+0x52/0x80 [mt76x02lib] mt76utxstatusdata+0x67/0xd0 [mt76usb] processonework+0x225/0x400 workerthread+0x50/0x3e0 ? processonework+0x400/0x400 kthread+0xe9/0x110 ? kthreadcompleteandexit+0x20/0x20 retfromfork+0x22/0x30
- Database specific
{ "cna_assigner": "Linux", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49022.json" }- References
-
- https://git.kernel.org/stable/c/0184ede0ec61b9cd075babfaa45081b1bf322234
- https://git.kernel.org/stable/c/3e8f7abcc3473bc9603323803aeaed4ffcc3a2ab
- https://git.kernel.org/stable/c/59b54f0563b6546c94bdb6823d3b382c75407019
- https://git.kernel.org/stable/c/f0fcad4c7201ecfaa17357f4ce0c50b4708df22d
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49022.json
- https://nvd.nist.gov/vuln/detail/CVE-2022-49022
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduceddb3e1c40cf2f973fbdd52ae0b59a9472b1c04f4aFixed0184ede0ec61b9cd075babfaa45081b1bf322234Fixed59b54f0563b6546c94bdb6823d3b382c75407019Fixedf0fcad4c7201ecfaa17357f4ce0c50b4708df22dFixed3e8f7abcc3473bc9603323803aeaed4ffcc3a2ab