Null Pointer Dereference in Qualcomm Technologies' Linux Kernel Wi-Fi Driver

CVE-2022-50627

What is CVE-2022-50627?

A vulnerability identified in the Wi-Fi driver for the Linux kernel can lead to a null pointer dereference crash when the interface is activated in monitor mode. This occurs during packet type extraction for SKB, which is unnecessary for received monitor ring packets. The issue is caused by the absence of a proper flag to bypass this extraction process, resulting in a crash. Affected systems include specific versions of the Linux Kernel and Qualcomm's QCN9074 hardware.

References