[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2022-49328":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-04T08:53:30.047Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":20,"aliases":21,"duplicate_of":9,"upstream":22,"downstream":23,"duplicates":50,"related":51,"reserved_at":9,"published_at":56,"modified_at":57,"state":58,"summary":59,"references_raw":68,"kevs":87,"epss":88,"epss_history":91,"metrics":348,"affected":356},"CVE-2022-49328","In the Linux kernel, the following vulnerability has been resolved:\n\nmt76: fix use-after-free by removing a non-RCU wcid pointer\n\nFixes an issue caught by KASAN about use-after-free in mt76_txq_schedule\nby protecting mtxq->wcid with rcu_lock between mt76_txq_schedule and\nsta_info_[alloc, free].\n\n[18853.876689] ==================================================================\n[18853.876751] BUG: KASAN: use-after-free in mt76_txq_schedule+0x204/0xaf8 [mt76]\n[18853.876773] Read of size 8 at addr ffffffaf989a2138 by task mt76-tx phy0/883\n[18853.876786]\n[18853.876810] CPU: 5 PID: 883 Comm: mt76-tx phy0 Not tainted 5.10.100-fix-510-56778d365941-kasan #5 0b01fbbcf41a530f52043508fec2e31a4215\n\n[18853.876840] Call trace:\n[18853.876861]  dump_backtrace+0x0/0x3ec\n[18853.876878]  show_stack+0x20/0x2c\n[18853.876899]  dump_stack+0x11c/0x1ac\n[18853.876918]  print_address_description+0x74/0x514\n[18853.876934]  kasan_report+0x134/0x174\n[18853.876948]  __asan_report_load8_noabort+0x44/0x50\n[18853.876976]  mt76_txq_schedule+0x204/0xaf8 [mt76 074e03e4640e97fe7405ee1fab547b81c4fa45d2]\n[18853.877002]  mt76_txq_schedule_all+0x2c/0x48 [mt76 074e03e4640e97fe7405ee1fab547b81c4fa45d2]\n[18853.877030]  mt7921_tx_worker+0xa0/0x1cc [mt7921_common f0875ebac9d7b4754e1010549e7db50fbd90a047]\n[18853.877054]  __mt76_worker_fn+0x190/0x22c [mt76 074e03e4640e97fe7405ee1fab547b81c4fa45d2]\n[18853.877071]  kthread+0x2f8/0x3b8\n[18853.877087]  ret_from_fork+0x10/0x30\n[18853.877098]\n[18853.877112] Allocated by task 941:\n[18853.877131]  kasan_save_stack+0x38/0x68\n[18853.877147]  __kasan_kmalloc+0xd4/0xfc\n[18853.877163]  kasan_kmalloc+0x10/0x1c\n[18853.877177]  __kmalloc+0x264/0x3c4\n[18853.877294]  sta_info_alloc+0x460/0xf88 [mac80211]\n[18853.877410]  ieee80211_prep_connection+0x204/0x1ee0 [mac80211]\n[18853.877523]  ieee80211_mgd_auth+0x6c4/0xa4c [mac80211]\n[18853.877635]  ieee80211_auth+0x20/0x2c [mac80211]\n[18853.877733]  rdev_auth+0x7c/0x438 [cfg80211]\n[18853.877826]  cfg80211_mlme_auth+0x26c/0x390 [cfg80211]\n[18853.877919]  nl80211_authenticate+0x6d4/0x904 [cfg80211]\n[18853.877938]  genl_rcv_msg+0x748/0x93c\n[18853.877954]  netlink_rcv_skb+0x160/0x2a8\n[18853.877969]  genl_rcv+0x3c/0x54\n[18853.877985]  netlink_unicast_kernel+0x104/0x1ec\n[18853.877999]  netlink_unicast+0x178/0x268\n[18853.878015]  netlink_sendmsg+0x3cc/0x5f0\n[18853.878030]  sock_sendmsg+0xb4/0xd8\n[18853.878043]  ____sys_sendmsg+0x2f8/0x53c\n[18853.878058]  ___sys_sendmsg+0xe8/0x150\n[18853.878071]  __sys_sendmsg+0xc4/0x1f4\n[18853.878087]  __arm64_compat_sys_sendmsg+0x88/0x9c\n[18853.878101]  el0_svc_common+0x1b4/0x390\n[18853.878115]  do_el0_svc_compat+0x8c/0xdc\n[18853.878131]  el0_svc_compat+0x10/0x1c\n[18853.878146]  el0_sync_compat_handler+0xa8/0xcc\n[18853.878161]  el0_sync_compat+0x188/0x1c0\n[18853.878171]\n[18853.878183] Freed by task 10927:\n[18853.878200]  kasan_save_stack+0x38/0x68\n[18853.878215]  kasan_set_track+0x28/0x3c\n[18853.878228]  kasan_set_free_info+0x24/0x48\n[18853.878244]  __kasan_slab_free+0x11c/0x154\n[18853.878259]  kasan_slab_free+0x14/0x24\n[18853.878273]  slab_free_freelist_hook+0xac/0x1b0\n[18853.878287]  kfree+0x104/0x390\n[18853.878402]  sta_info_free+0x198/0x210 [mac80211]\n[18853.878515]  __sta_info_destroy_part2+0x230/0x2d4 [mac80211]\n[18853.878628]  __sta_info_flush+0x300/0x37c [mac80211]\n[18853.878740]  ieee80211_set_disassoc+0x2cc/0xa7c [mac80211]\n[18853.878851]  ieee80211_mgd_deauth+0x4a4/0x10a0 [mac80211]\n[18853.878962]  ieee80211_deauth+0x20/0x2c [mac80211]\n[18853.879057]  rdev_deauth+0x7c/0x438 [cfg80211]\n[18853.879150]  cfg80211_mlme_deauth+0x274/0x414 [cfg80211]\n[18853.879243]  cfg80211_mlme_down+0xe4/0x118 [cfg80211]\n[18853.879335]  cfg80211_disconnect+0x218/0x2d8 [cfg80211]\n[18853.879427]  __cfg80211_leave+0x17c/0x240 [cfg80211]\n[18853.879519]  cfg80211_leave+0x3c/0x58 [cfg80211]\n[18853.879611]  wiphy_suspend+0xdc/0x200 [cfg80211]\n[18853.879628]  dpm_run_callback+0x58/0x408\n[18853.879642]  __device_suspend+0x4cc/0x864\n[18853.879658]  async_suspend+0x34/0xf4\n[18\n---truncated---",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-416","Use After Free","The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory \"belongs\" to the code that operates on the new pointer.","weakness","Stable","Variant","High",[],[],[],[],[24,26,28,30,32,34,36,38,40,42,44,46,48],{"_key":25},"SUSE-SU-2025:1027-1",{"_key":27},"SUSE-SU-2025:1176-1",{"_key":29},"SUSE-SU-2025:1183-1",{"_key":31},"SUSE-SU-2025:1241-1",{"_key":33},"RHSA-2025:10179",{"_key":35},"RHSA-2025:10828",{"_key":37},"RHSA-2025:9493",{"_key":39},"RHSA-2025:9494",{"_key":41},"RHSA-2025:9498",{"_key":43},"DEBIAN-CVE-2022-49328",{"_key":45},"RHSA-2023:2458",{"_key":47},"RHSA-2023:2951",{"_key":49},"UBUNTU-CVE-2022-49328",[],[52,53,54,55],{"_key":25},{"_key":27},{"_key":29},{"_key":31},"2025-02-26T02:10:49.590Z","2026-05-11T18:57:34.288Z","Analyzed",{"cisa_kev":60,"cisa_ransomware":60,"cisa_vendor":9,"epss_severity":61,"epss_score":62,"severity":63,"severity_score":64,"severity_version":65,"severity_source":66,"severity_vector":67,"severity_status":58},false,"low",0.00016,"high",7.8,"v3.1","cve.org","CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",[69,75,79,83],{"url":70,"sources":71,"tags":73},"https://git.kernel.org/stable/c/4448327b41738dbfcda680eb4935ff835568f468",[66,72],"nvd",[74],"Patch",{"url":76,"sources":77,"tags":78},"https://git.kernel.org/stable/c/e55bcdd0bf34a8b10d45ce80ebb3164c5292a17d",[66,72],[74],{"url":80,"sources":81,"tags":82},"https://git.kernel.org/stable/c/d5f77f1dbb59feae81f88e44551e8e1d8a802d9a",[66,72],[74],{"url":84,"sources":85,"tags":86},"https://git.kernel.org/stable/c/51fb1278aa57ae0fc54adaa786e1965362bed4fb",[66,72],[74],[],{"date":89,"score":62,"percentile":90},"2026-06-03",0.03734,[92,96,99,102,105,108,111,114,117,121,124,127,130,133,136,140,143,146,149,153,156,159,162,165,168,171,174,177,180,183,186,189,192,195,198,201,204,207,210,213,215,217,220,222,224,227,229,231,234,236,240,243,246,249,252,255,258,261,264,266,268,270,273,276,278,280,283,286,289,291,294,297,300,303,306,309,312,314,317,320,322,325,328,331,334,336,338,340,342,345],{"date":93,"score":94,"percentile":95},"2025-11-04",0.0001,0.00802,{"date":97,"score":94,"percentile":98},"2025-11-05",0.0081,{"date":100,"score":94,"percentile":101},"2025-11-06",0.00812,{"date":103,"score":94,"percentile":104},"2025-11-07",0.00815,{"date":106,"score":94,"percentile":107},"2025-11-08",0.00813,{"date":109,"score":94,"percentile":110},"2025-11-09",0.00811,{"date":112,"score":94,"percentile":113},"2025-11-10",0.00803,{"date":115,"score":94,"percentile":116},"2025-11-11",0.00806,{"date":118,"score":119,"percentile":120},"2025-11-12",0.00011,0.00934,{"date":122,"score":119,"percentile":123},"2025-11-13",0.00936,{"date":125,"score":119,"percentile":126},"2025-11-14",0.0094,{"date":128,"score":119,"percentile":129},"2025-11-15",0.00963,{"date":131,"score":119,"percentile":132},"2025-11-16",0.00964,{"date":134,"score":119,"percentile":135},"2025-11-17",0.0096,{"date":137,"score":138,"percentile":139},"2025-11-18",0.00048,0.10161,{"date":141,"score":138,"percentile":142},"2025-11-19",0.10174,{"date":144,"score":138,"percentile":145},"2025-11-20",0.10197,{"date":147,"score":119,"percentile":148},"2025-11-21",0.01007,{"date":150,"score":151,"percentile":152},"2025-11-22",0.00012,0.01278,{"date":154,"score":151,"percentile":155},"2025-11-23",0.01266,{"date":157,"score":151,"percentile":158},"2025-11-24",0.0126,{"date":160,"score":151,"percentile":161},"2025-11-25",0.01254,{"date":163,"score":151,"percentile":164},"2025-11-26",0.01193,{"date":166,"score":151,"percentile":167},"2025-11-27",0.01191,{"date":169,"score":151,"percentile":170},"2025-11-28",0.01196,{"date":172,"score":151,"percentile":173},"2025-11-29",0.01231,{"date":175,"score":151,"percentile":176},"2025-11-30",0.0124,{"date":178,"score":151,"percentile":179},"2025-12-01",0.01268,{"date":181,"score":151,"percentile":182},"2025-12-02",0.01263,{"date":184,"score":151,"percentile":185},"2025-12-03",0.01265,{"date":187,"score":151,"percentile":188},"2025-12-04",0.01238,{"date":190,"score":151,"percentile":191},"2025-12-05",0.01253,{"date":193,"score":151,"percentile":194},"2025-12-06",0.01257,{"date":196,"score":151,"percentile":197},"2025-12-07",0.01255,{"date":199,"score":151,"percentile":200},"2025-12-08",0.01256,{"date":202,"score":151,"percentile":203},"2025-12-09",0.01269,{"date":205,"score":151,"percentile":206},"2025-12-10",0.0128,{"date":208,"score":151,"percentile":209},"2025-12-11",0.01271,{"date":211,"score":151,"percentile":212},"2025-12-12",0.01272,{"date":214,"score":151,"percentile":182},"2025-12-13",{"date":216,"score":151,"percentile":158},"2025-12-14",{"date":218,"score":151,"percentile":219},"2025-12-15",0.01259,{"date":221,"score":151,"percentile":182},"2025-12-16",{"date":223,"score":151,"percentile":182},"2025-12-17",{"date":225,"score":151,"percentile":226},"2025-12-18",0.01252,{"date":228,"score":151,"percentile":200},"2025-12-19",{"date":230,"score":151,"percentile":200},"2025-12-20",{"date":232,"score":151,"percentile":233},"2025-12-21",0.01267,{"date":235,"score":151,"percentile":203},"2025-12-22",{"date":237,"score":238,"percentile":239},"2025-12-23",0.00013,0.01474,{"date":241,"score":238,"percentile":242},"2025-12-24",0.01473,{"date":244,"score":238,"percentile":245},"2025-12-25",0.01478,{"date":247,"score":238,"percentile":248},"2025-12-26",0.0148,{"date":250,"score":62,"percentile":251},"2025-12-27",0.0264,{"date":253,"score":238,"percentile":254},"2025-12-28",0.01471,{"date":256,"score":238,"percentile":257},"2025-12-29",0.01462,{"date":259,"score":238,"percentile":260},"2025-12-30",0.01457,{"date":262,"score":238,"percentile":263},"2025-12-31",0.01454,{"date":265,"score":238,"percentile":239},"2026-01-01",{"date":267,"score":238,"percentile":245},"2026-01-02",{"date":269,"score":238,"percentile":248},"2026-01-03",{"date":271,"score":238,"percentile":272},"2026-01-04",0.01453,{"date":274,"score":238,"percentile":275},"2026-01-05",0.0146,{"date":277,"score":238,"percentile":263},"2026-01-06",{"date":279,"score":238,"percentile":257},"2026-01-07",{"date":281,"score":238,"percentile":282},"2026-01-08",0.01477,{"date":284,"score":238,"percentile":285},"2026-01-09",0.0149,{"date":287,"score":238,"percentile":288},"2026-01-10",0.01501,{"date":290,"score":238,"percentile":288},"2026-01-11",{"date":292,"score":238,"percentile":293},"2026-01-12",0.01482,{"date":295,"score":238,"percentile":296},"2026-01-13",0.01481,{"date":298,"score":238,"percentile":299},"2026-01-14",0.01485,{"date":301,"score":238,"percentile":302},"2026-01-15",0.01496,{"date":304,"score":238,"percentile":305},"2026-01-16",0.01505,{"date":307,"score":238,"percentile":308},"2026-01-17",0.01509,{"date":310,"score":238,"percentile":311},"2026-01-18",0.01518,{"date":313,"score":238,"percentile":308},"2026-01-19",{"date":315,"score":238,"percentile":316},"2026-01-20",0.01495,{"date":318,"score":238,"percentile":319},"2026-01-21",0.01487,{"date":321,"score":238,"percentile":319},"2026-01-22",{"date":323,"score":238,"percentile":324},"2026-01-23",0.01499,{"date":326,"score":238,"percentile":327},"2026-01-24",0.01507,{"date":329,"score":238,"percentile":330},"2026-01-25",0.01508,{"date":332,"score":238,"percentile":333},"2026-01-26",0.01506,{"date":335,"score":238,"percentile":316},"2026-01-27",{"date":337,"score":238,"percentile":285},"2026-01-28",{"date":339,"score":238,"percentile":288},"2026-01-29",{"date":341,"score":238,"percentile":333},"2026-01-30",{"date":343,"score":238,"percentile":344},"2026-01-31",0.01522,{"date":346,"score":238,"percentile":347},"2026-02-01",0.01541,[349,354],{"source":66,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":350,"cvss_v4_0":9},{"baseScore":64,"baseSeverity":351,"vectorString":67,"impactScore":352,"exploitabilityScore":353},"HIGH",9.8,4.6,{"source":72,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":355,"cvss_v4_0":9},{"baseScore":64,"baseSeverity":351,"vectorString":67,"impactScore":352,"exploitabilityScore":353},[357,380],{"ecosystem":9,"name":358,"vendor":359,"product":359,"cpe_part":360,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":361},"Linux","linux","a",[362,369,372,375,378],{"version":363,"is_range":364,"range_type":66,"version_start":365,"version_start_type":366,"version_end":367,"version_end_type":368,"fixed_in":9},">= 7bc04215a66b60e198aecaee8418f6d79fa19faa, \u003C 4448327b41738dbfcda680eb4935ff835568f468",true,"7bc04215a66b60e198aecaee8418f6d79fa19faa","including","4448327b41738dbfcda680eb4935ff835568f468","excluding",{"version":370,"is_range":364,"range_type":66,"version_start":365,"version_start_type":366,"version_end":371,"version_end_type":368,"fixed_in":9},">= 7bc04215a66b60e198aecaee8418f6d79fa19faa, \u003C e55bcdd0bf34a8b10d45ce80ebb3164c5292a17d","e55bcdd0bf34a8b10d45ce80ebb3164c5292a17d",{"version":373,"is_range":364,"range_type":66,"version_start":365,"version_start_type":366,"version_end":374,"version_end_type":368,"fixed_in":9},">= 7bc04215a66b60e198aecaee8418f6d79fa19faa, \u003C d5f77f1dbb59feae81f88e44551e8e1d8a802d9a","d5f77f1dbb59feae81f88e44551e8e1d8a802d9a",{"version":376,"is_range":364,"range_type":66,"version_start":365,"version_start_type":366,"version_end":377,"version_end_type":368,"fixed_in":9},">= 7bc04215a66b60e198aecaee8418f6d79fa19faa, \u003C 51fb1278aa57ae0fc54adaa786e1965362bed4fb","51fb1278aa57ae0fc54adaa786e1965362bed4fb",{"version":379,"is_range":60,"range_type":66,"version_start":379,"version_start_type":366,"version_end":379,"version_end_type":366,"fixed_in":9},"4.16",{"ecosystem":9,"name":381,"vendor":359,"product":382,"cpe_part":383,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":384},"linux kernel","linux_kernel","o",[385,389,393],{"version":386,"is_range":364,"range_type":387,"version_start":9,"version_start_type":9,"version_end":388,"version_end_type":368,"fixed_in":9},"lt5.15.58","cpe","5.15.58",{"version":390,"is_range":364,"range_type":387,"version_start":391,"version_start_type":366,"version_end":392,"version_end_type":368,"fixed_in":9},"gte5.16_lt5.17.14","5.16","5.17.14",{"version":394,"is_range":364,"range_type":387,"version_start":395,"version_start_type":366,"version_end":396,"version_end_type":368,"fixed_in":9},"gte5.18_lt5.18.3","5.18","5.18.3"]