CVE-2022-49500

In the Linux kernel, the following vulnerability has been resolved:

wl1251: dynamically allocate memory used for DMA

With introduction of vmap'ed stacks, stack parameters can no longer be used for DMA and now leads to kernel panic.

It happens at several places for the wl1251 (e.g. when accessed through SDIO) making it unuseable on e.g. the OpenPandora.

We solve this by allocating temporary buffers or use wl1251_read32().

Tested on v5.18-rc5 with OpenPandora.

This vulnerability is rated as having a Moderate impact because exploitation requires local access alongside the presence of specific Texas Instruments wl1251 wireless hardware, resulting strictly in a denial of service through a kernel panic. The wl1251 driver is designed for specialized embedded hardware and is not utilized in standard enterprise server environments. Consequently, typical Red Hat Enterprise Linux deployments are not exposed to this flaw under default configurations.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.