PT-2022-7345 · Linux · Linux Kernel

Published 2022-10-21 · Updated 2022-11-10 · CVE-2022-3642

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Linux Kernel (affected versions not specified)

Description The issue is related to the use of uninitialized variables hw ctrl s1 and sw ctrl s1 in the rtl8188f spur calibration() function in the drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxu 8188f.c module. This could allow an attacker to cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use of Uninitialized Resource

Weakness Enumeration

CWE-908

Related Identifiers

BDU:2024-03765

CVE-2022-3642

Affected Products

Linux Kernel

References · 9

• 🔥 https://git.kernel.org/pub/scm/linux/kernel/git/wireless/wireless-next.git/commit/?id=80e5acb6dd72b25a6e6527443b9e9c1c3a7bcef6 · Exploit
• https://bdu.fstec.ru/vul/2024-03765 · Security Note
• https://ubuntu.com/security/CVE-2022-3642 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-3642 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-3642 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-3642 · Security Note
• https://t.me/cibsecurity/51933 · Telegram Post
• https://vuldb.com/?id.211959 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3642 · Note