CVE-2022-49238
CVSS 3.1 Score 7.8 of 10 (high)
Details
Summary
CVE-2022-49238 is a vulnerability affecting the Linux kernel's ath11k driver. The issue was caused by a commit that skipped the peer delete operation for QCA6390/WCN6855 devices, leading to a use-after-free error. The bug resulted in a memory leak and a use-after-free warning from KASAN. The vulnerability was discovered during a firmware crash and has been addressed by changing the WMI command sequence to only skip the WMI_PEER_DELETE_CMDID for QCA6390/WCN6855 devices. The exploitation of this vulnerability could potentially result in arbitrary code execution or denial of service.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Linux Kernel
Affected Vendors
- LINUX