https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 14:57:08 +0000 https://db.gcve.eu/vuln/cve-2022-49934 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>wifi: mac80211: Fix UAF in ieee80211_scan_rx()</p> <p>ieee80211_scan_rx() tries to access scan_req-&gt;flags after a null check, but a UAF is observed when the scan is completed and __ieee80211_scan_completed() executes, which then calls cfg80211_scan_done() leading to the freeing of scan_req.</p> <p>Since scan_req is rcu_dereference()&#39;d, prevent the racing in __ieee80211_scan_completed() by ensuring that from mac80211&#39;s POV it is no longer accessed from an RCU read critical section before we call cfg80211_scan_done().</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>wifi: mac80211: Fix UAF in ieee80211_scan_rx()</p> <p>ieee80211_scan_rx() tries to access scan_req-&gt;flags after a null check, but a UAF is observed when the scan is completed and __ieee80211_scan_completed() executes, which then calls cfg80211_scan_done() leading to the freeing of scan_req.</p> <p>Since scan_req is rcu_dereference()&#39;d, prevent the racing in __ieee80211_scan_completed() by ensuring that from mac80211&#39;s POV it is no longer accessed from an RCU read critical section before we call cfg80211_scan_done().</p> https://db.gcve.eu/vuln/cve-2022-49934