CVE-2022-49328

A vulnerability was found in the Linux kernel's mt76 wi-fi driver. A concurrency bug causes the mtxq TX queue to maintain a raw pointer to a wcid structure (mtxq->wcid) that might be freed by the time it is accessed. This issue can lead to a use-after-free scenario, leading to system instability, memory corruption, and potentially arbitrary code execution.

This vulnerability is rated as Moderate severity because exploitation requires a local user with access to an active system equipped with specific MediaTek wireless hardware, limiting the attack surface in standard enterprise server installations. The flaw stems from a race condition during transmit queue processing where station metadata is deallocated prematurely, which can lead to memory corruption or kernel crashes. On default Red Hat Enterprise Linux deployments, wireless networking devices and associated drivers are rarely present or utilized.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.