CVE-2022-49129

A flaw was found in the Linux kernel's MediaTek mt7921 wireless driver. When the network interface fails to initialize during startup, a scheduled reset task is not canceled before cleanup routines run. This issue can result in a use-after-free condition, where memory is accessed after being released, allowing a local user to cause a system crash and Denial of Service (DoS).

This vulnerability is rated as having a Moderate impact for Red Hat Enterprise Linux because exploitation requires local access and the presence of specific MediaTek MT7921 wireless network hardware. Typical server and enterprise virtualization environments do not utilize Wi-Fi adapters of this model, significantly limiting exposure in standard deployments. Additionally, triggering the condition depends on an interface initialization failure, restricting the blast radius primarily to a local denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.