CVE-2022-49112

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A buffer overflow issue exists in the skb pull() function within the include/linux/skbuff.h module. In the mt7921s driver, when operating in monitor mode, the system may receive CTS packets with a 10-byte payload requiring 6 bytes of header padding after the RXD buffer. If the RXD is only in the first linear buffer and skb pull() is used to pull the buffer size RXD-size+6 bytes, it triggers a kernel BUG. This occurs because the operation may attempt to access a non-linear buffer, leading to a system crash and denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.