CVE-2022-49956

HIGH

Linux Kernel Use-After-Free in rtl8712 staging driver

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8712: fix use after free bugs _Read/Write_MACREG callbacks are NULL so the read/write_macreg_hdl() functions don't do anything except free the "pcmd" pointer. It results in a use after free. Delete them.

Scores

CVSS v3 7.8
EPSS 0.0021
EPSS Percentile 11.0%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-416
Status published
Products (27)
linux/Kernel 2.6.37 - 4.9.328linux
linux/Kernel 4.10.0 - 4.14.293linux
linux/Kernel 4.15.0 - 4.19.258linux
linux/Kernel 4.20.0 - 5.4.213linux
linux/Kernel 5.11.0 - 5.15.66linux
linux/Kernel 5.16.0 - 5.19.8linux
linux/Kernel 5.5.0 - 5.10.142linux
Linux/Linux < 2.6.37
Linux/Linux 2.6.37
Linux/Linux 2865d42c78a9121caad52cb02d1fbb7f5cdbc4ef - 19e3f69d19801940abc2ac37c169882769ed9770
... and 17 more
Published Jun 18, 2025
Tracked Since Feb 18, 2026