CVE-2022-50508

In the Linux kernel, the following vulnerability has been resolved:

wifi: mt76: mt76x0: fix oob access in mt76x0_phy_get_target_power

After 'commit ba45841ca5eb ("wifi: mt76: mt76x02: simplify struct mt76x02_rate_power")', mt76x02 relies on ht[0-7] rate_power data for vht mcs{0,7}, while it uses vth[0-1] rate_power for vht mcs {8,9}. Fix a possible out-of-bound access in mt76x0_phy_get_target_power routine.

This vulnerability is rated as having Moderate impact because exploitation is constrained to systems utilizing specific MediaTek wireless hardware and requires local or adjacent wireless access to trigger an out-of-bounds memory read, potentially causing a kernel crash or limited information exposure. Red Hat Enterprise Linux is not affected by this flaw because the flawed driver logic was introduced in later upstream kernels and was never incorporated into supported Red Hat kernel builds.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.