Improper locking in Linux kernel staging rtl8192e driver

1) Improper locking

EUVDB-ID: #VU104694

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-49315

CWE-ID: CWE-667 - Improper Locking

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper locking within the rtllib_beacons_stop() function in drivers/staging/rtl8192e/rtllib_softmac.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Install update from vendor's website.

Vulnerable software versions

Linux kernel: All versions

CPE2.3

• cpe:2.3:o:linux_foundation:linux_kernel:*:*:*:*:*:*:*:*

External links

https://git.kernel.org/stable/c/08bacf871c019163ccd1389d0bc957a43324967a
https://git.kernel.org/stable/c/0f69d7d5e918aa43423d86bd17ddb11b1b5e8ada
https://git.kernel.org/stable/c/381045dc64d23a2229c47c5524c06bfc33d34446
https://git.kernel.org/stable/c/4681129fda9e8555392eaaadb239ec6a6e2b3e12
https://git.kernel.org/stable/c/46c861009bf437a18417df24cea0d181741b7d72
https://git.kernel.org/stable/c/64b05fa212c7e4d057676e8b7e7120c6eb2f615b
https://git.kernel.org/stable/c/9b6bdbd9337de3917945847bde262a34a87a6303
https://git.kernel.org/stable/c/fef451f0fbbe85dbd2962b18379d02e2965610db
https://git.kernel.org/stable/c/ffd4c4d5293e4985092ea45ba21cad9326e2e434

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.