01 Record

CVE-2022-49503

ath9k_htc: fix potential out of bounds access with invalid rxstatus->rs_keyix

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

ath9k_htc: fix potential out of bounds access with invalid rxstatus->rs_keyix

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.28% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 20.4% of scored records. A rank, not a probability.
NVD base score: 7.1 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
NVD analysis status: Analyzed. NVD last modified this record on 2026-06-17.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-02-26 02:13Z1 YR AGO

Last updated

2026-05-11 19:01Z5 MO AGO

Reserved

2025-02-26

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-125Out-of-bounds ReadBase

Data version

5.2

Document digest

879b3c852997d891911871b9cc7ea312e01b146bb959c6ab9bcf1dfa71c8853c

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux4ed1a8d4a25711f780b96920fff2bb531229e322 to < 0bcb528402cd5e1a6e1833e956fd58a12d509e8e, 4ed1a8d4a25711f780b96920fff2bb531229e322 to < a048e0c3caa852397b7b50d4c82a0415c05f7ac3, 4ed1a8d4a25711f780b96920fff2bb531229e322 to < 4bdcf32c965c27f55ccc4ee71c1927131115b0bb, 4ed1a8d4a25711f780b96920fff2bb531229e322 to < 2326d398ccd41ba6d93b8346532dfa432ab00fee, 4ed1a8d4a25711f780b96920fff2bb531229e322 to < 461e4c1f199076275f16bf6f3d3e42c6b6c79f33, 4ed1a8d4a25711f780b96920fff2bb531229e322 to < 7f6defe0fabc79f29603c6fa3c80e4fe0456a3e9, 4ed1a8d4a25711f780b96920fff2bb531229e322 to < eda518db7db16c360bc84379d90675650daa3048, 4ed1a8d4a25711f780b96920fff2bb531229e322 to < 3dad3fed5672828c7fb0465cb66a3d9a70952fa6, 4ed1a8d4a25711f780b96920fff2bb531229e322 to < 2dc509305cf956381532792cb8dceef2b1504765, 3.15—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/0bcb528402cd5e1a6e1833e956fd58a12d509e8e
git.kernel.orghttps://git.kernel.org/stable/c/a048e0c3caa852397b7b50d4c82a0415c05f7ac3
git.kernel.orghttps://git.kernel.org/stable/c/4bdcf32c965c27f55ccc4ee71c1927131115b0bb
git.kernel.orghttps://git.kernel.org/stable/c/2326d398ccd41ba6d93b8346532dfa432ab00fee
git.kernel.orghttps://git.kernel.org/stable/c/461e4c1f199076275f16bf6f3d3e42c6b6c79f33
git.kernel.orghttps://git.kernel.org/stable/c/7f6defe0fabc79f29603c6fa3c80e4fe0456a3e9
git.kernel.orghttps://git.kernel.org/stable/c/eda518db7db16c360bc84379d90675650daa3048
git.kernel.orghttps://git.kernel.org/stable/c/3dad3fed5672828c7fb0465cb66a3d9a70952fa6
git.kernel.orghttps://git.kernel.org/stable/c/2dc509305cf956381532792cb8dceef2b1504765

07 Fixed in

Debian 12

linux
Fixed in 5.18.5-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 5.18.5-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 5.18.5-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.