CVE-2022-49503

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
26/02/2025
Last modified:
26/02/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> ath9k_htc: fix potential out of bounds access with invalid rxstatus-&gt;rs_keyix<br /> <br /> The "rxstatus-&gt;rs_keyix" eventually gets passed to test_bit() so we need to<br /> ensure that it is within the bitmap.<br /> <br /> drivers/net/wireless/ath/ath9k/common.c:46 ath9k_cmn_rx_accept()<br /> error: passing untrusted data &amp;#39;rx_stats-&gt;rs_keyix&amp;#39; to &amp;#39;test_bit()&amp;#39;

Impact