CVE-2022-49231 rtw88: fix memory overrun and memory leak during hw_scan
A memory overrun in the rtw88 Wi-Fi driver can cause access violations and potential code execution, requiring kernel patches.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2022-49231?
CVE-2022-49231 is a high-severity memory corruption vulnerability in Linux kernel, published on 26 Feb 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
rtw88: fix memory overrun and memory leak during hw_scan
Previously we allocated less memory than actual required, overwrite to the buffer causes the mm module to complaint and raise access violation faults. Along with potential memory leaks when returned early. Fix these by passing the correct size and proper deinit flow.
Weakness: CWE-401
Which versions are affected by CVE-2022-49231?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2022-49231?
Apply the vendor's patch.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2022-49231 being exploited?
There is no known exploitation of CVE-2022-49231 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as DEBIAN-CVE-2022-49231, GHSA-whqx-pwjm-q9pc, UBUNTU-CVE-2022-49231.