CVE-2022-49416

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2022-49416
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-49416.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2022-49416
Downstream
Related
Published
2025-02-26T02:12:37.173Z
Modified
2026-03-20T12:22:25.317759Z
Severity
  • 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
wifi: mac80211: fix use-after-free in chanctx code
Details

In the Linux kernel, the following vulnerability has been resolved:

wifi: mac80211: fix use-after-free in chanctx code

In ieee80211vifusereservedcontext(), when we have an old context and the new context's replacestate is set to IEEE80211CHANCTXREPLACENONE, we free the old context in ieee80211vifusereservedreassign(). Therefore, we cannot check the old_ctx anymore, so we should set it to NULL after this point.

However, since the newctx replace state is clearly not IEEE80211CHANCTXREPLACESOTHER, we're not going to do anything else in this function and can just return to avoid accessing the freed old_ctx.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49416.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
5bcae31d9cb1ebfad3ad5a3eea04c8cdc329a04f
Fixed
88cc8f963febe192d6ded9df7217f92f380b449a
Fixed
4ba81e794f0fad6234f644c2da1ae14d5b95e1c4
Fixed
9f1e5cc85ad77e52f54049a94db0407445ae2a34
Fixed
265bec4779a38b65e86a25120370f200822dfa76
Fixed
6118bbdf69f4718b02d26bbcf2e497eb66004331
Fixed
b79110f2bf6022e60e590d2e094728a8eec3e79e
Fixed
82c8e7bbdd06c7ed58e22450cc5b37f33a25bb2c
Fixed
4f05a9e15edcdf5b97e0d86ab6ecd5f187289f6c
Fixed
2965c4cdf7ad9ce0796fac5e57debb9519ea721e

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-49416.json"