CVE-2022-49405

staging: r8188eu: prevent ->Ssid overflow in rtw_wx_set_scan()

State: Published
Severity: 7.8 High
Published: Feb 26, 2025
Updated: Aug 5, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

staging: r8188eu: prevent ->Ssid overflow in rtw_wx_set_scan()

This code has a check to prevent read overflow but it needs another check to prevent writing beyond the end of the ->Ssid[] array.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	2b42bd58b32155a1be4dd78991845dec05aaef9e to before ac2eab7de458f5e1210ce1237afab40a307075c8Affected 2b42bd58b32155a1be4dd78991845dec05aaef9e to before c4bd6b72df4f01aa866ceb298466d6d07a6bd525Affected 2b42bd58b32155a1be4dd78991845dec05aaef9e to before 476bfda0be0f9669add92bff604ca78226cf53d1Affected 2b42bd58b32155a1be4dd78991845dec05aaef9e to before bc10916e890948d8927a5c8c40fb5dc44be5e1b8Affected
LinuxLinux	5.15Affected before 5.15Not affected 5.15.46 through 5.15.Not affected 5.17.14 through 5.17.Not affected 5.18.3 through 5.18.*Not affected 5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.