PT-2025-8412 · Linux+2 · Linux Kernel+2

Ben Greear + 1 · Published 2022-05-13 · Updated 2025-04-14 · CVE-2022-49479

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free race condition exists in the Linux kernel, specifically in the mt76 module, related to tx status on station removal. There is a small window where ongoing tx activity can lead to a skb being added to the status tracking idr after it has been cleaned up, keeping the wcid linked in the status poll list. This issue occurs due to the timing of when the wcid pointer is cleared in dev->wcid during mt76 sta pre rcu remove.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Double Free

Weakness Enumeration

CWE-416

CWE-415

Related Identifiers

BDU:2025-04340

CVE-2022-49479

SUSE-SU-2025:1176-1

SUSE-SU-2025:1241-1

SUSE-SU-2025_1241-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 1304

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49479.json · Exploit
• https://git.kernel.org/stable/c/ddd426d72aca4054045a9bd3b80a4ce1d398f11f · Patch
• https://bdu.fstec.ru/vul/2025-04340 · Security Note
• https://git.kernel.org/stable/c/fcfe1b5e162bf473c1d47760962cec8523c00466 · Patch
• https://git.kernel.org/stable/c/ef7f9f894cfd0b2e471206409a529af4a26ddd55 · Patch
• https://ubuntu.com/security/CVE-2022-49479 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1241-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49479 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-49479 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1176-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-49479 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49479 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-49479 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49479 · Security Note
• https://suse.com/security/cve/CVE-2022-49379 · Note