Out-of-Bounds Access in mt76x0 Component of Linux Kernel by Linux Foundation

CVE-2022-50508

What is CVE-2022-50508?

A vulnerability has been identified in the mt76x0 component of the Linux kernel, where improper reliance on rate power data can lead to out-of-bounds access. This issue originates from a recent commit which modified how the mt76x02 handles rate power data for various MCS indexes. Such an access could potentially disrupt the stability and security of network operations, making it vital for users of affected kernel versions to apply the necessary patches. Proper resolution has been established to mitigate this vulnerability effectively.

References