General Protection Fault in Linux Kernel's mac80211 Module - CVE-2022-49876
Summary
CVE-2022-49876: In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix general-protection-fault in ieee80211_subif_start_xmit() When device is running and the interface status is changed, the gpf issue i... Affects linux versions < 6.0.10-1. Fixed in 6.0.10-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The Linux kernel is the core component of the Linux operating system, managing hardware and system resources. The mac80211 module is responsible for handling wireless networking in Linux, providing a framework for wireless drivers. This vulnerability affects the mac80211 module, specifically when the interface status changes while the device is running, leading to potential system instability.
Vulnerability Detail
CVE-2022-49876 is a vulnerability in the Linux kernel's mac80211 module that can lead to a general protection fault (GPF). This issue arises when the interface status is altered while the sending queue continues to transmit packets. Specifically, when the bss (basic service set) is set to NULL, subsequent access to this NULL pointer can trigger a GPF, potentially causing system crashes or instability. The vulnerability is triggered by concurrent operations in different threads, which can lead to undefined behavior and system errors.
How To Fix
Minimum fixed version
6.0.10-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. It is recommended to apply the patch as soon as it is available to mitigate the risk.
Conclusion
CVE-2022-49876 is a critical vulnerability in the Linux kernel's mac80211 module that can lead to system instability due to a general protection fault. It is essential to update your Linux package to the patched version to mitigate this risk. Utilize tools like Vulert to monitor your applications for vulnerabilities effectively.
See every vulnerability recorded for linux →
FAQ
CVE-2022-49876 is a vulnerability in the Linux kernel's mac80211 module that can cause a general protection fault when the interface status changes while packets are being transmitted.
This vulnerability can lead to system crashes or instability due to a general protection fault triggered by accessing a NULL pointer in the mac80211 module.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in real-time. By using the Vulert playground, you can check if your application is affected by this vulnerability without any signup.
While there are no specific workarounds, it is advisable to monitor your system closely for any unusual behavior until you can apply the patch.
Detailed information about CVE-2022-49876 can be found in the official CVE database and security advisories related to the Linux kernel.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
