CVE-2022-49479

Summary

CVE-2022-49479 is a vulnerability affecting the Linux kernel that has been addressed. This issue involves the mt76 driver, where a use-after-free race condition can occur during station removal. Specifically, if ongoing tx activity causes an skb to be added to the status tracking idr after it has already been cleaned up, then the wcid linked in the status poll list will remain active. This vulnerability has been mitigated by modifying the code to only add status skbs if the wcid pointer is still assigned to the device.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.