CVE-2022-49503 — ath9k_htc: fix potential out of bounds access with invalid rxstatus->rs_keyix

Affected: Linux

In the Linux kernel, the following vulnerability has been resolved:

ath9k_htc: fix potential out of bounds access with invalid rxstatus->rs_keyix

The "rxstatus->rs_keyix" eventually gets passed to test_bit() so we need to ensure that it is within the bitmap.

drivers/net/wireless/ath/ath9k/common.c:46 ath9k_cmn_rx_accept() error: passing untrusted data 'rx_stats->rs_keyix' to 'test_bit()'

RHSA-2026:2573 — Red Hat Security Advisory: kernel security update

kernel: Linux kernel: ath9k_htc out-of-bounds access vulnerability kernel: ext4: fix use-after-free in ext4_orphan_cleanup kernel: tcp: fix a signed-integer-overflow bug in tcp_add_backlog() kernel: Linux kernel: Out-of-bounds write in VXLAN due to incorrect nexthop hash size leading to denial of service kernel: Bluetooth: hci_event: call disconnect callback before deleting conn kernel: Linux kernel (CIFS): Use-after-free vulnerability allows data integrity compromise and denial of service kernel: drm/i915: Fix NULL ptr deref by checking new_crtc_state kernel: devlink: rate: Unset parent pointer in devl_rate_nodes_destroy kernel: Linux kernel: Out-of-bounds write in fbdev can lead to privilege escalation, information disclosure, or denial of service. kernel: Linux kernel: Information disclosure and denial of service via out-of-bounds read in font glyph handling kernel: net: atlantic: fix fragment overflow handling in RX path

Most recent entries from all

CVE-2022-49503 — ath9k_htc: fix potential out of bounds access with invalid rxstatus->rs_keyix

RHSA-2026:2573 — Red Hat Security Advisory: kernel security update