Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt76x0: fix oob access in mt76x0_phy_get_target_power After 'commit ba45841ca5eb ("wifi: mt76: mt76x02: simplify struct mt76x02_rate_power")', mt76x02 relies on ht[0-7] rate_power data for vht mcs{0,7}, while it uses vth[0-1] rate_power for vht mcs {8,9}. Fix a possible out-of-bound access in mt76x0_phy_get_target_power routine.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | >= 6.2, < 6.2.3 |
Related Weaknesses (CWE)
References
- https://git.kernel.org/stable/c/6e1abc51c945663bddebfa1beb9590ff5b250eb7Patch
- https://git.kernel.org/stable/c/bf425c5d7ef6fb4083c1e0d46440f886127b5ee5Patch
FAQ
What is CVE-2022-50508?
CVE-2022-50508 is a vulnerability with a CVSS score of 7.1 (HIGH). In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt76x0: fix oob access in mt76x0_phy_get_target_power After 'commit ba45841ca5eb ("wifi: mt76: mt76x02: simplify struc...
How severe is CVE-2022-50508?
CVE-2022-50508 has been rated HIGH with a CVSS base score of 7.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-50508?
Check the references section above for vendor advisories and patch information. Affected products include: Linux Linux Kernel.