PT-2025-8579 · Linux+4 · Linux Kernel+4

Published 2023-05-09 · Updated 2025-04-15 · CVE-2022-49646

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A issue in the Linux kernel's mac80211 module has been identified, specifically related to queue selection for mesh/OCB interfaces when using iTXQ. The code incorrectly assumes that there is only one vif queue for broadcast packets, using the BE queue. Allowing non-BE queue marking violates this assumption, potentially causing issues with queue handling in the driver and resulting in an AQL underflow warning.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CESA-2023_2951

CVE-2022-49646

OPENSUSE-SU-2025_1263-1

RHSA-2023:2458

RHSA-2023:2951

RHSA-2023_2458

RHSA-2023_2951

SUSE-SU-2025:1027-1

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1194-1

SUSE-SU-2025:1241-1

SUSE-SU-2025:1263-1

SUSE-SU-2025_1027-1

SUSE-SU-2025_1241-1

SUSE-SU-2025_1263-1

Affected Products

Astra Linux

Centos

Linux Kernel

Red Hat

Suse

References · 1343

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49646.json · Exploit
• https://git.kernel.org/stable/c/41ecab279a70dced9005f4d55fa0fcde8938603f · Patch
• https://osv.dev/vulnerability/CVE-2022-49646 · Vendor Advisory
• https://git.kernel.org/stable/c/5a9df31017999197b6e60535940f2f2fe1bd3b0d · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:1183-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1176-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-49646 · Vendor Advisory
• https://git.kernel.org/stable/c/444be5a02b77f3b7a8ac9c1a0b074fbb3bd89cd0 · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-49646 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49646 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:1194-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1241-1 · Vendor Advisory
• https://git.kernel.org/stable/c/50e2ab39291947b6c6c7025cf01707c270fcde59 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:1027-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1263-1 · Vendor Advisory