PT-2025-8350 · Linux+4 · Linux Kernel+4

Johannes Berg · Published 2022-06-01 · Updated 2025-09-29 · CVE-2022-49416

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue was found in the mac80211 code of the Linux kernel. The problem occurs in the ieee80211 vif use reserved context() function when the replace state of the new context is set to IEEE80211 CHANCTX REPLACE NONE. In this case, the old context is freed, but its pointer is not set to NULL, leading to a potential use-after-free error. This issue can be exploited when the new ctx replace state is not IEEE80211 CHANCTX REPLACES OTHER, causing the function to return without further actions, thus avoiding access to the freed old ctx.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALSA-2025_16880

BDU:2025-10272

CESA-2023_2951

CVE-2022-49416

OESA-2025-1370

OPENSUSE-SU-2025_1263-1

RHSA-2023:2458

RHSA-2023:2951

RHSA-2023_2458

RHSA-2023_2951

SUSE-SU-2025:1027-1

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1194-1

SUSE-SU-2025:1241-1

SUSE-SU-2025:1263-1

SUSE-SU-2025:1293-1

SUSE-SU-2025_1027-1

SUSE-SU-2025_1241-1

SUSE-SU-2025_1263-1

SUSE-SU-2025_1293-1

Affected Products

Astra Linux

Centos

Linux Kernel

Red Hat

Suse

References · 1533

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49416.json · Exploit
• https://git.kernel.org/stable/c/265bec4779a38b65e86a25120370f200822dfa76 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-49395 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49095 · Security Note
• https://git.kernel.org/stable/c/88cc8f963febe192d6ded9df7217f92f380b449a · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-21785 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49235 · Security Note
• https://osv.dev/vulnerability/CVE-2022-49416 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-49416 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49407 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49354 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:1183-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49517 · Security Note
• https://git.kernel.org/stable/c/4f05a9e15edcdf5b97e0d86ab6ecd5f187289f6c · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-53007 · Security Note