CVE-2022-49740

Summary

CVE-2022-49740 is a vulnerability affecting the Linux kernel's wifi driver, brcmfmac. This issue results in slab-out-of-bounds reads in brcmf_construct_chaninfo() and brcmf_enable_bw40_2g(), leading to potential crashes. The cause is an oversized count value of channel specifications provided by the device, causing the allocated buffer to be insufficient. The patch resolves this by adding checks to prevent such cases and free the buffer when necessary. The vulnerability was discovered using a modified version of syzkaller and has been reported to cause a crash in the kworker/0:2 thread.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.