Cloud Vulnerability DB
An open project to list all known cloud vulnerabilities and Cloud Service Provider security issues
Vulnerability DatabaseCVE-2022-49479
CVE-2022-49479:
Linux Kernel vulnerability analysis and mitigation
Overview
A use-after-free race condition vulnerability was discovered in the Linux kernel's mt76 wireless driver (CVE-2022-49479). The vulnerability exists in the tx status handling during station removal. The issue was discovered in April 2022 and patched in May 2022 (Kernel Commit).
Technical details
The vulnerability occurs due to a race window where ongoing tx activity can lead to a socket buffer (skb) being added to the status tracking idr after that idr has already been cleaned up. This keeps the wireless client ID (wcid) linked in the status poll list incorrectly. The issue stems from the mt76txstatusskbadd function not properly checking if the wcid pointer is still valid in dev->wcid before adding status skbs (Kernel Commit).
Impact
This vulnerability could lead to memory corruption and potential system crashes due to use-after-free conditions when removing wireless stations in systems using the mt76 wireless driver (Kernel Commit).
Mitigation and workarounds
The issue was fixed by adding additional checks in mt76txstatusskbadd to verify that the wcid pointer is still valid in dev->wcid before adding status skbs. The fix also includes proper locking around the wcid pointer access using spinlockbh. Users should update to patched kernel versions that include the fix (Kernel Commit).
Additional resources
Source: This report was generated using AI
Free Vulnerability Assessment
Benchmark your Cloud Security Posture
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
Ready to see Wiz in action?
“Best User Experience I have ever seen, provides full visibility to cloud workloads.”
David EstlickCISO
“Wiz provides a single pane of glass to see what is going on in our cloud environments.”
Adam FletcherChief Security Officer
“We know that if Wiz identifies something as critical, it actually is.”
Greg PoniatowskiHead of Threat and Vulnerability Management