NVD Vulnerability Detail

CVE-2022-49022

Summary	In the Linux kernel, the following vulnerability has been resolved: wifi: mac8021: fix possible oob access in ieee80211_get_rate_duration Fix possible out-of-bound access in ieee80211_get_rate_duration routine as reported by the following UBSAN report: UBSAN: array-index-out-of-bounds in net/mac80211/airtime.c:455:47 index 15 is out of range for type 'u16 [12]' CPU: 2 PID: 217 Comm: kworker/u32:10 Not tainted 6.1.0-060100rc3-generic Hardware name: Acer Aspire TC-281/Aspire TC-281, BIOS R01-A2 07/18/2017 Workqueue: mt76 mt76u_tx_status_data [mt76_usb] Call Trace: <TASK> show_stack+0x4e/0x61 dump_stack_lvl+0x4a/0x6f dump_stack+0x10/0x18 ubsan_epilogue+0x9/0x43 __ubsan_handle_out_of_bounds.cold+0x42/0x47 ieee80211_get_rate_duration.constprop.0+0x22f/0x2a0 [mac80211] ? ieee80211_tx_status_ext+0x32e/0x640 [mac80211] ieee80211_calc_rx_airtime+0xda/0x120 [mac80211] ieee80211_calc_tx_airtime+0xb4/0x100 [mac80211] mt76x02_send_tx_status+0x266/0x480 [mt76x02_lib] mt76x02_tx_status_data+0x52/0x80 [mt76x02_lib] mt76u_tx_status_data+0x67/0xd0 [mt76_usb] process_one_work+0x225/0x400 worker_thread+0x50/0x3e0 ? process_one_work+0x400/0x400 kthread+0xe9/0x110 ? kthread_complete_and_exit+0x20/0x20 ret_from_fork+0x22/0x30
Publication Date	Oct. 22, 2024, 5:15 a.m.
Registration Date	Oct. 22, 2024, 12:01 p.m.
Last Update	Oct. 25, 2024, 3:48 a.m.

Affected software configurations

Related information, measures and tools

No	URL	タグ
1	https://git.kernel.org/stable/c/0184ede0ec61b9cd075babfaa45081b1bf322234	Patch
2	https://git.kernel.org/stable/c/59b54f0563b6546c94bdb6823d3b382c75407019	Patch
3	https://git.kernel.org/stable/c/f0fcad4c7201ecfaa17357f4ce0c50b4708df22d	Patch
4	https://git.kernel.org/stable/c/3e8f7abcc3473bc9603323803aeaed4ffcc3a2ab	Patch

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-129	配列インデックスの不適切な検証	https://cwe.mitre.org/data/definitions/129.html

JVN Vulnerability Information

Linux の Linux Kernel における配列インデックスの検証に関する脆弱性

Title	Linux の Linux Kernel における配列インデックスの検証に関する脆弱性
Summary	Linux の Linux Kernel には、配列インデックスの検証に関する脆弱性が存在します。
Possible impacts	情報を取得される、情報を改ざんされる、およびサービス運用妨害 (DoS) 状態にされる可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Nov. 25, 2022, midnight
Registration Date	Oct. 25, 2024, 2:33 p.m.
Last Update	Oct. 25, 2024, 2:33 p.m.

Affected System

Linux

Linux Kernel 5.11 以上 5.15.82 未満

Linux Kernel 5.16 以上 6.0.12 未満

Linux Kernel 5.5 以上 5.10.158 未満

Linux Kernel 6.1

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2022-49022	https://www.cve.org/CVERecord?id=CVE-2022-49022
National Vulnerability Database (NVD)
2	CVE-2022-49022	https://nvd.nist.gov/vuln/detail/CVE-2022-49022

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-129	https://cwe.mitre.org/data/definitions/129.html

ベンダー情報

No	Name	URL
Kernel.org git repositories
1	wifi: mac8021: fix possible oob access in ieee80211_get_rate_duration (0184ede)	https://git.kernel.org/stable/c/0184ede0ec61b9cd075babfaa45081b1bf322234
2	wifi: mac8021: fix possible oob access in ieee80211_get_rate_duration (3e8f7ab)	https://git.kernel.org/stable/c/3e8f7abcc3473bc9603323803aeaed4ffcc3a2ab
3	wifi: mac8021: fix possible oob access in ieee80211_get_rate_duration (59b54f0)	https://git.kernel.org/stable/c/59b54f0563b6546c94bdb6823d3b382c75407019
4	wifi: mac8021: fix possible oob access in ieee80211_get_rate_duration (f0fcad4)	https://git.kernel.org/stable/c/f0fcad4c7201ecfaa17357f4ce0c50b4708df22d
Linux Kernel
5	Linux Kernel Archives	https://www.kernel.org

Change Log

No	Changed Details	Date of change
1	[2024年10月25日] 掲載	Oct. 25, 2024, 10:32 a.m.