CVE-2022-49417

published 2025-02-26

CVE-2022-49417: In the Linux kernel, the following vulnerability has been resolved: iwlwifi: mei: fix potential NULL-ptr deref If SKB allocation fails, continue rather than…

Priority P4 17 medium 5.5 CVSS 3.1

AV L AC L PR L UI N S U C N I N A H

In the Linux kernel, the following vulnerability has been resolved:

iwlwifi: mei: fix potential NULL-ptr deref

If SKB allocation fails, continue rather than using the NULL
pointer.

Coverity CID: 1497650

Affected

10 ranges

Vendor	Product	Version range	Fixed in
debian	linux	< linux 5.18.5-1 (bookworm)	linux 5.18.5-1 (bookworm)
linux	linux	—	—
linux	linux	>= 2da4366f9e2c44afedec4acad65a99a3c7da1a35 < 29b81de94d62b5e2704bb5106b3e701ca8d7c7a4	29b81de94d62b5e2704bb5106b3e701ca8d7c7a4
linux	linux	>= 2da4366f9e2c44afedec4acad65a99a3c7da1a35 < 5d8d06fd3a02919100b28f927bcb76481ec0a0e3	5d8d06fd3a02919100b28f927bcb76481ec0a0e3
linux	linux	>= 2da4366f9e2c44afedec4acad65a99a3c7da1a35 < 78488a64aea94a3336ee97f345c1496e9bc5ebdf	78488a64aea94a3336ee97f345c1496e9bc5ebdf
linux	linux_kernel	>= 0 < 5.18.5-1	5.18.5-1
linux	linux_kernel	>= 0 < 5.18.5-1	5.18.5-1
linux	linux_kernel	>= 0 < 5.18.5-1	5.18.5-1
linux	linux_kernel	>= 5.17 < 5.17.14	5.17.14
linux	linux_kernel	>= 5.18 < 5.18.3	5.18.3

CVSS provenance

nvd v3.1 5.5 MEDIUM CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

osv 5.5 MEDIUM

vendor_debian 5.5 MEDIUM

vendor_redhat 5.5 MEDIUM

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-476