CVE-2022-50533 | BDVDB-2026-296949 Detail

Description#

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: mlme: fix null-ptr deref on failed assoc If association to an AP without a link 0 fails, then we crash in tracing because it assumes that either ap_mld_addr or link 0 BSS is valid, since we clear sdata->vif.valid_links and then don't add the ap_mld_addr to the struct. Since we clear also sdata->vif.cfg.ap_addr, keep a local copy of it and assign it earlier, before clearing valid_links, to fix this.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12025-10-07Record published in the CVE List.
2. Version 22026-05-11Most recent update recorded in the CVE List.