CVE-2022-49934

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2022-49934
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-49934.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2022-49934
Downstream
Related
Published
2025-06-18T10:54:36.161Z
Modified
2026-04-11T12:44:42.402467Z
Summary
wifi: mac80211: Fix UAF in ieee80211_scan_rx()
Details

In the Linux kernel, the following vulnerability has been resolved:

wifi: mac80211: Fix UAF in ieee80211scanrx()

ieee80211scanrx() tries to access scan_req->flags after a null check, but a UAF is observed when the scan is completed and _ieee80211scancompleted() executes, which then calls cfg80211scandone() leading to the freeing of scanreq.

Since scanreq is rcudereference()'d, prevent the racing in __ieee80211scancompleted() by ensuring that from mac80211's POV it is no longer accessed from an RCU read critical section before we call cfg80211scandone().

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49934.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
6ea0a69ca21bbddab5b3979c2190013b0263e749
Fixed
6eb181a64fdabf10be9e54de728876667da20255
Fixed
e0ff39448cea654843744c72c6780293c5082cb1
Fixed
78a07732fbb0934d14827d8f09b9aa6a49ee1aa9
Fixed
9ad48cbf8b07f10c1e4a7a262b32a9179ae9dd2d
Fixed
4abc8c07a065ecf771827bde3c63fbbe4aa0c08b
Fixed
5d20c6f932f2758078d0454729129c894fe353e7
Fixed
c0445feb80a4d0854898118fa01073701f8d356b
Fixed
60deb9f10eec5c6a20252ed36238b55d8b614a2c

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-49934.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
3.19.0
Fixed
4.9.330
Type
ECOSYSTEM
Events
Introduced
4.10.0
Fixed
4.14.295
Type
ECOSYSTEM
Events
Introduced
4.15.0
Fixed
4.19.260
Type
ECOSYSTEM
Events
Introduced
4.20.0
Fixed
5.4.215
Type
ECOSYSTEM
Events
Introduced
5.5.0
Fixed
5.10.142
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.66
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
5.19.8

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-49934.json"