CVE-2022-50627

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A null pointer dereference issue exists in the ath11k wireless driver. When a network interface is brought up in monitor mode, the driver attempts to extract the packet type for a Socket Buffer (SKB) within the received msdu delivery path. Because monitor ring packets are RAW packets, they lack the expected structure, leading to a kernel crash. The issue is specifically linked to the ath11k dp rx mon deliver() function in the drivers/net/wireless/ath/ath11k/dp rx.c module. Exploitation of this flaw could impact the confidentiality, integrity, and availability of protected information.

Recommendations As a temporary workaround, avoid bringing up the wireless interface in monitor mode until the system is updated. At the moment, there is no information about a newer version that contains a fix for this vulnerability.