CVE-2022-49328

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the mt76 wireless driver. The problem occurs in the mt76 txq schedule() function when accessing the mtxq->wcid pointer. This can be mitigated by protecting the mtxq->wcid variable with an RCU lock between the mt76 txq schedule() function and the sta info alloc() and sta info free() functions. Exploitation of this issue could potentially impact the confidentiality, integrity, and availability of protected information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.