Buffer Overflow Vulnerability in Linux Kernel's ath11k Driver
Summary
CVE-2022-49533: In the Linux kernel, the following vulnerability has been resolved: ath11k: Change max no of active probe SSID and BSSID to fw capability The maximum number of SSIDs in a for active probe requests is currently reported a... Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is a core component of many operating systems, providing essential services and managing hardware resources. The ath11k driver is responsible for supporting Qualcomm Atheros 802.11ax wireless devices. This driver facilitates wireless communication, enabling devices to connect to networks efficiently. However, a vulnerability has been identified in the ath11k driver that could lead to serious security issues if exploited.
Vulnerability Detail
In the Linux kernel, specifically within the ath11k driver, a buffer overflow vulnerability exists due to a mismatch between the reported maximum number of active probe SSIDs and the actual capacity of the scan_req_params structure. The driver reports a maximum of 16 SSIDs, while the structure can only hold 10. This discrepancy can be exploited by an attacker through the wpa_supplicant in userspace, potentially leading to memory corruption and the overwriting of critical pointers, which could compromise system stability and security.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can limit the number of SSIDs in active probe requests to 10 or less until the package is updated. This can be done by configuring the wpa_supplicant settings to restrict the number of SSIDs being probed.
Conclusion
The CVE-2022-49533 vulnerability poses a significant risk to systems utilizing the ath11k driver in the Linux kernel. Users are strongly advised to update their systems to the patched version to mitigate potential security threats. Additionally, utilizing tools like Vulert can help monitor for such vulnerabilities in real-time.
See every vulnerability recorded for linux →
FAQ
CVE-2022-49533 is a buffer overflow vulnerability found in the ath11k driver of the Linux kernel, which can be exploited to overwrite critical memory pointers.
You can use Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected by this vulnerability.
Exploitation of this vulnerability can lead to memory corruption, system instability, and potential unauthorized access to system resources.
Yes, a patch is available in the form of an updated Linux package. Users should upgrade to version 5.18.5-1 or later.
If immediate updates are not possible, consider limiting the number of SSIDs in active probe requests as a temporary workaround.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
