CVE-2022-49405

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-49405
In the Linux kernel, the following vulnerability has been resolved: staging: r8188eu: prevent ->Ssid overflow in rtw_wx_set_scan() This code has a check to prevent read overflow but it needs another check to prevent writing beyond the end of the ->Ssid[] array.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/476bfda0be0f9669add92bff604ca78226cf53d1 Patch
https://git.kernel.org/stable/c/ac2eab7de458f5e1210ce1237afab40a307075c8 Patch
https://git.kernel.org/stable/c/bc10916e890948d8927a5c8c40fb5dc44be5e1b8 Patch
https://git.kernel.org/stable/c/c4bd6b72df4f01aa866ceb298466d6d07a6bd525 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

21 Oct 2025, 12:14

Type Values Removed Values Added
First Time Linux
Linux linux Kernel
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: staging: r8188eu: prevenir ->Ssid overflow en rtw_wx_set_scan() Este código tiene una verificación para prevenir el desbordamiento de lectura, pero necesita otra verificación para prevenir la escritura más allá del final de la matriz ->Ssid[].
References () https://git.kernel.org/stable/c/476bfda0be0f9669add92bff604ca78226cf53d1 - () https://git.kernel.org/stable/c/476bfda0be0f9669add92bff604ca78226cf53d1 - Patch
References () https://git.kernel.org/stable/c/ac2eab7de458f5e1210ce1237afab40a307075c8 - () https://git.kernel.org/stable/c/ac2eab7de458f5e1210ce1237afab40a307075c8 - Patch
References () https://git.kernel.org/stable/c/bc10916e890948d8927a5c8c40fb5dc44be5e1b8 - () https://git.kernel.org/stable/c/bc10916e890948d8927a5c8c40fb5dc44be5e1b8 - Patch
References () https://git.kernel.org/stable/c/c4bd6b72df4f01aa866ceb298466d6d07a6bd525 - () https://git.kernel.org/stable/c/c4bd6b72df4f01aa866ceb298466d6d07a6bd525 - Patch
CWE NVD-CWE-noinfo
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

26 Feb 2025, 07:01

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-26 07:01

Updated : 2025-10-21 12:14

NVD link : CVE-2022-49405

Mitre link : CVE-2022-49405

CVE.ORG link : CVE-2022-49405

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo