{"id":"DEBIAN-CVE-2022-49471","details":"In the Linux kernel, the following vulnerability has been resolved:  rtw89: cfo: check mac_id to avoid out-of-bounds  Somehow, hardware reports incorrect mac_id and pollute memory. Check index before we access the array.    UBSAN: array-index-out-of-bounds in rtw89/phy.c:2517:23   index 188 is out of range for type 's32 [64]'   CPU: 1 PID: 51550 Comm: irq/35-rtw89_pc Tainted: G           OE   Call Trace:    \u003cIRQ\u003e    show_stack+0x52/0x58    dump_stack_lvl+0x4c/0x63    dump_stack+0x10/0x12    ubsan_epilogue+0x9/0x45    __ubsan_handle_out_of_bounds.cold+0x44/0x49    ? __alloc_skb+0x92/0x1d0    rtw89_phy_cfo_parse+0x44/0x7f [rtw89_core]    rtw89_core_rx+0x261/0x871 [rtw89_core]    ? __alloc_skb+0xee/0x1d0    rtw89_pci_napi_poll+0x3fa/0x4ea [rtw89_pci]    __napi_poll+0x33/0x1a0    net_rx_action+0x126/0x260    ? __queue_work+0x217/0x4c0    __do_softirq+0xd9/0x315    ? disable_irq_nosync+0x10/0x10    do_softirq.part.0+0x6d/0x90    \u003c/IRQ\u003e    \u003cTASK\u003e    __local_bh_enable_ip+0x62/0x70    rtw89_pci_interrupt_threadfn+0x182/0x1a6 [rtw89_pci]    irq_thread_fn+0x28/0x60    irq_thread+0xc8/0x190    ? irq_thread_fn+0x60/0x60    kthread+0x16b/0x190    ? irq_thread_check_affinity+0xe0/0xe0    ? set_kthread_struct+0x50/0x50    ret_from_fork+0x22/0x30    \u003c/TASK\u003e","modified":"2026-08-27T23:04:30.260887556Z","published":"2025-02-26T07:01:23.333Z","upstream":["CVE-2022-49471"],"references":[{"type":"ADVISORY","url":"https://security-tracker.debian.org/tracker/CVE-2022-49471"}],"affected":[{"package":{"name":"linux","ecosystem":"Debian:12","purl":"pkg:deb/debian/linux?arch=source&distro=bookworm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.18.5-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2022-49471.json"}},{"package":{"name":"linux","ecosystem":"Debian:13","purl":"pkg:deb/debian/linux?arch=source&distro=trixie"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.18.5-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2022-49471.json"}},{"package":{"name":"linux","ecosystem":"Debian:14","purl":"pkg:deb/debian/linux?arch=source&distro=forky"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.18.5-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2022-49471.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}]}