Address CAM Leak Vulnerability in Linux Kernel - CVE-2022-49539
Summary
CVE-2022-49539: In the Linux kernel, the following vulnerability has been resolved: rtw89: ser: fix CAM leaks occurring in L2 reset The CAM, meaning address CAM and bssid CAM here, will get leaks during SER (system error recover) L2 res... Affects linux versions < 5.18.5-1. Fixed in 5.18.5-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, providing essential services for hardware and software interaction. It is known for its stability, performance, and security features. However, vulnerabilities can arise, impacting its functionality and security. CVE-2022-49539 specifically addresses a leak in the address CAM and BSSID CAM during the system error recovery process, which can lead to potential security risks.
Vulnerability Detail
CVE-2022-49539 is a vulnerability in the Linux kernel that involves leaks in the address CAM and BSSID CAM during the L2 reset process. This issue arises when the ieee80211_restart_hw() function is called, leading to improper handling of CAM entries. The vulnerability can result in memory leaks, which may be exploited by attackers to gain unauthorized access or disrupt network connections. The leak occurs under non-secure connections and can lead to multiple CAM entries being acquired unnecessarily, exacerbating the issue.
How To Fix
Minimum fixed version
5.18.5-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. However, it is advisable to monitor network connections and ensure that secure connections are used whenever possible to mitigate potential risks.
Conclusion
CVE-2022-49539 is a significant vulnerability in the Linux kernel that can lead to memory leaks during the L2 reset process. It is essential to update to the latest patched version to protect your system from potential exploitation. Regular monitoring and using secure connections can further enhance security.
See every vulnerability recorded for linux →
FAQ
CVE-2022-49539 is a vulnerability in the Linux kernel that causes leaks in the address CAM and BSSID CAM during the L2 reset process.
This vulnerability can lead to memory leaks, which may be exploited by attackers to gain unauthorized access or disrupt network connections.
It is crucial to update your Linux package to the patched version (5.18.5-1 or later) to mitigate the risks associated with this vulnerability.
Currently, there are no specific workarounds mentioned, but using secure connections can help mitigate risks.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in real-time. Visit Vulert Scanner to check if your application is affected without requiring access to the code.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
