CVE-2022-49503

ath9k_htc: fix potential out of bounds access with invalid rxstatus->rs_keyix

published February 26, 2025

CVSS
—
EPSS
0%
Percentile
19.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ath9k_htc: fix potential out of bounds access with invalid rxstatus->rs_keyix

The "rxstatus->rs_keyix" eventually gets passed to test_bit() so we need to

ensure that it is within the bitmap.

drivers/net/wireless/ath/ath9k/common.c:46 ath9k_cmn_rx_accept()

error: passing untrusted data 'rx_stats->rs_keyix' to 'test_bit()'

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00281 · 19.5th percentile
Published
2025-02-26T02:13Z
EPSS history
Timeline
  • 26 FEB 02:13Z
    ath9k_htc: fix potential out of bounds access with invalid rxstatus->rs_keyix
    cvelistv5