CVE-2022-49405

CVE-2022-49405

High · published February 26, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
18.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

staging: r8188eu: prevent ->Ssid overflow in rtw_wx_set_scan()

This code has a check to prevent read overflow but it needs another

check to prevent writing beyond the end of the ->Ssid[] array.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00275 · 18.9th percentile
Published
2025-02-26T12:01Z
Affected products (3)
ProductVersionsFixed in
linux/linux_kernel≥ 5.15, < 5.15.465.15.46
linux/linux_kernel≥ 5.16, < 5.17.145.17.14
linux/linux_kernel≥ 5.18, < 5.18.35.18.3
References (4)
EPSS history
Timeline
  • 26 FEB 02:12Z
    staging: r8188eu: prevent ->Ssid overflow in rtw_wx_set_scan()
    cvelistv5