VULNERABILITY INTELLIGENCE
CVE-2022-49231
CVSS score5.5 MEDIUM
EPSS probability0.23%
CISA KEVNot currently listed
Published2025-02-26
Last modified2026-08-04
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Description
In the Linux kernel, the following vulnerability has been resolved: rtw88: fix memory overrun and memory leak during hw_scan Previously we allocated less memory than actual required, overwrite to the buffer causes the mm module to complaint and raise access violation faults. Along with potential memory leaks when returned early. Fix these by passing the correct size and proper deinit flow.
Weakness classification
- CWE-401: Missing Release of Memory after Effective Lifetime