CVE-2022-49539

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-49539
In the Linux kernel, the following vulnerability has been resolved: rtw89: ser: fix CAM leaks occurring in L2 reset The CAM, meaning address CAM and bssid CAM here, will get leaks during SER (system error recover) L2 reset process and ieee80211_restart_hw() which is called by L2 reset process eventually. The normal flow would be like -> add interface (acquire 1) -> enter ips (release 1) -> leave ips (acquire 1) -> connection (occupy 1) <(A) 1 leak after L2 reset if non-sec connection> The ieee80211_restart_hw() flow (under connection) -> ieee80211 reconfig -> add interface (acquire 1) -> leave ips (acquire 1) -> connection (occupy (A) + 2) <(B) 1 more leak> Originally, CAM is released before HW restart only if connection is under security. Now, release CAM whatever connection it is to fix leak in (A). OTOH, check if CAM is already valid to avoid acquiring multiple times to fix (B). Besides, if AP mode, release address CAM of all stations before HW restart.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/b169f877f001a474fb89939842c390518160bcc5 Patch
https://git.kernel.org/stable/c/f6aff772c9978844529618d86aafb53e5d3ae161 Patch
Configurations

Configuration 1 (hide)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

21 Oct 2025, 12:04

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/b169f877f001a474fb89939842c390518160bcc5 - () https://git.kernel.org/stable/c/b169f877f001a474fb89939842c390518160bcc5 - Patch
References () https://git.kernel.org/stable/c/f6aff772c9978844529618d86aafb53e5d3ae161 - () https://git.kernel.org/stable/c/f6aff772c9978844529618d86aafb53e5d3ae161 - Patch
CWE CWE-401
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
First Time Linux
Linux linux Kernel
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: rtw89: ser: corrige las fugas de CAM que ocurren en el reinicio de L2 El CAM, es decir, la dirección CAM y el bssid CAM aquí, tendrán fugas durante el proceso de reinicio de L2 de SER (recuperación de error del sistema) y ieee80211_restart_hw() que es llamado por el proceso de reinicio de L2 eventualmente. El flujo normal sería como -&gt; agregar interfaz (adquirir 1) -&gt; ingresar ips (liberar 1) -&gt; dejar ips (adquirir 1) -&gt; conexión (ocupar 1) &lt;(A) 1 fuga después del reinicio de L2 si la conexión no es segura&gt; El flujo ieee80211_restart_hw() (bajo conexión) -&gt; ieee80211 reconfig -&gt; agregar interfaz (adquirir 1) -&gt; dejar ips (adquirir 1) -&gt; conexión (ocupar (A) + 2) &lt;(B) 1 fuga más&gt; Originalmente, CAM se libera antes del reinicio de HW solo si la conexión está bajo seguridad. Ahora, libere la CAM de cualquier conexión para reparar la fuga en (A). Por otra parte, verifique si la CAM ya es válida para evitar realizar múltiples adquisiciones para reparar (B). Además, si está en modo AP, libere la dirección CAM de todas las estaciones antes de reiniciar el hardware.

26 Feb 2025, 07:01

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-26 07:01

Updated : 2025-10-21 12:04

NVD link : CVE-2022-49539

Mitre link : CVE-2022-49539

CVE.ORG link : CVE-2022-49539

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-401

Missing Release of Memory after Effective Lifetime