https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 06:34:57 +0000 https://db.gcve.eu/vuln/cve-2022-49416 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>wifi: mac80211: fix use-after-free in chanctx code</p> <p>In ieee80211_vif_use_reserved_context(), when we have an old context and the new context&#39;s replace_state is set to IEEE80211_CHANCTX_REPLACE_NONE, we free the old context in ieee80211_vif_use_reserved_reassign(). Therefore, we cannot check the old_ctx anymore, so we should set it to NULL after this point.</p> <p>However, since the new_ctx replace state is clearly not IEEE80211_CHANCTX_REPLACES_OTHER, we&#39;re not going to do anything else in this function and can just return to avoid accessing the freed old_ctx.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>wifi: mac80211: fix use-after-free in chanctx code</p> <p>In ieee80211_vif_use_reserved_context(), when we have an old context and the new context&#39;s replace_state is set to IEEE80211_CHANCTX_REPLACE_NONE, we free the old context in ieee80211_vif_use_reserved_reassign(). Therefore, we cannot check the old_ctx anymore, so we should set it to NULL after this point.</p> <p>However, since the new_ctx replace state is clearly not IEEE80211_CHANCTX_REPLACES_OTHER, we&#39;re not going to do anything else in this function and can just return to avoid accessing the freed old_ctx.</p> https://db.gcve.eu/vuln/cve-2022-49416