CVE-2022-49405

In the Linux kernel, the following vulnerability has been resolved:

staging: r8188eu: prevent ->Ssid overflow in rtw_wx_set_scan()

This code has a check to prevent read overflow but it needs another check to prevent writing beyond the end of the ->Ssid[] array.

This vulnerability is rated as Moderate impact because triggering the out-of-bounds write requires local access to initiate an SSID scan on affected wireless hardware, limiting the blast radius to a system crash or local denial of service. The flaw resides in the r8188eu staging wireless driver, which is disabled and not compiled in standard Red Hat Enterprise Linux kernel packages. As a result, typical Red Hat enterprise environments are not exposed to this issue under default configurations.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.