CVE-2022-49129 Details
Description
In the Linux kernel, the following vulnerability has been resolved: mt76: mt7921: fix crash when startup fails. If the nic fails to start, it is possible that the reset_work has already been scheduled. Ensure the work item is canceled so we do not have use-after-free crash in case cleanup is called before the work item is executed. This fixes crash on my x86_64 apu2 when mt7921k radio fails to work. Radio still fails, but OS does not crash.
A use-after-free vulnerability has been identified in the Linux kernel's mt76 driver for the mt7921 wireless chip. This issue occurs when the network interface controller (NIC) fails to initialize properly. In such cases, a scheduled work item reset can lead to a crash if the cleanup process is invoked before the work item has been completed. While this vulnerability causes a system crash, it is important to note that the underlying radio issue remains unresolved.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Feb 27, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/38fbe806645090c07aa97171f20fc62c3d7d3a98 | kernel.org | Patch |
| https://git.kernel.org/stable/c/827e7799c61b978fbc2cc9dac66cb62401b2b3f0 | kernel.org | Patch |
| https://git.kernel.org/stable/c/ac1260b661c2ef0d0a56680cdb5672b931b7be8f | kernel.org | Patch |
| https://git.kernel.org/stable/c/c1a5e6002ec441a3b9fb4d048b4b49ae93409a46 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-416 | Use After Free | CISA-ADP |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 4.16, < 5.15.34 >= 5.16, < 5.16.20 >= 5.17, < 5.17.3 |
CPE
Remediation
| |
Change History
6 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Aug 13, 2026 | CVE Modified | kernel.org |
| Jun 17, 2026 | CVE Modified | kernel.org |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Mar 25, 2025 | Initial Analysis | [email protected] |
| Feb 27, 2025 | CVE Modified | CISA-ADP |
| Feb 26, 2025 | New CVE Received | kernel.org |