SB20250226605 - Use of uninitialized resource in Linux kernel staging rtl8712 driver
Published: February 26, 2025 Updated: May 11, 2025
Security Bulletin ID
SB20250226605
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Use of uninitialized resource (CVE-ID: CVE-2022-49301)
The vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to use of uninitialized resource within the usb_read8(), usb_read16() and usb_read32() functions in drivers/staging/rtl8712/usb_ops.c. A local user can perform a denial of service (DoS) attack.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/33ef21d55418ab6a62a63fd550b2dbe297433372
- https://git.kernel.org/stable/c/58762f1c63c75cbe1dc393eed3c9cf8e38310ca1
- https://git.kernel.org/stable/c/95b0f54f8a898072a2810c05fab34d971f23a612
- https://git.kernel.org/stable/c/d1b57669732d09da7e13ef86d058dab0cd57f6e0
- https://git.kernel.org/stable/c/d7ed3c85da0b230bcdf5329acfe012ed093f3daa
- https://git.kernel.org/stable/c/de075af8c404f7d59ed34df230aedd9f645fb846
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.18.4