THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2022-49328 (HIGH 8.8) — In the Linux kernel, the following vulnerability has been resolved: mt76: fix use-after-free by removing a non-RCU wcid pointer Fixes an issue caught by KASAN about use-after-free in mt76_txq_schedule by protecting mtxq->wcid with rcu_lock between mt76_txq_schedule and sta_info

[NVD] CVE-2022-49328 (HIGH 8.8) — In the Linux kernel, the following vulnerability has been resolved: mt76: fix use-after-free by removing a non-RCU wcid pointer Fixes an issue caught by KASAN about use-after-free in mt76_txq_schedule by protecting mtxq->wcid with rcu_lock between mt76_txq_schedule and sta_info

lownvdPublished 2025-02-26

CVE-2022-49328 CVSS: 8.8 HIGH Published: 2025-02-26T07:01:09.610

In the Linux kernel, the following vulnerability has been resolved:

mt76: fix use-after-free by removing a non-RCU wcid pointer

Fixes an issue caught by KASAN about use-after-free in mt76_txq_schedule by protecting mtxq->wcid with rcu_lock between mt76_txq_schedule and sta_info_[alloc, free].

[18853.876689] ======================

Indicators of compromise

074e03e4640e97fe7405ee1fab547b81c4fa45d2sha1
f0875ebac9d7b4754e1010549e7db50fbd90a047sha1
CVE-2022-49328cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2022-49328