CVE-2022-49231CWE-401

CVE-2022-49231

High · published February 26, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
13.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

rtw88: fix memory overrun and memory leak during hw_scan

Previously we allocated less memory than actual required, overwrite

to the buffer causes the mm module to complaint and raise access

violation faults. Along with potential memory leaks when returned

early. Fix these by passing the correct size and proper deinit flow.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00234 · 13.5th percentile
Weakness
CWE-401 · Missing Release of Memory after Effective Lifetime
Published
2025-02-26T12:01Z
Affected products (1)
ProductVersionsFixed in
linux/linux_kernel≥ 5.17, < 5.17.25.17.2
References (2)
EPSS history
Timeline
  • 26 FEB 01:55Z
    rtw88: fix memory overrun and memory leak during hw_scan
    cvelistv5