{
  "cveId": "CVE-2022-48875",
  "url": "https://patchblox.com/security/cve/CVE-2022-48875",
  "summary": "CVE-2022-48875 is fixed in linux on 1 platform, first by DEBIAN-CVE-2022-48875, released August 21, 2024. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  wifi: mac80211: sdata can be NULL during AMPDU s...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  wifi: mac80211: sdata can be NULL during AMPDU start  ieee80211_tx_ba_session_handle_start() may get NULL for sdata when a deauthentication is ongoing.  Here a trace triggering the race with the hostapd test multi_ap_fronthaul_on_ap:  (gdb) list *drv_ampdu_action\u002B0x46 0x8b16 is in drv_ampdu_action (net/mac80211/driver-ops.c:396). 391             int ret = -EOPNOTSUPP; 392 393             might_sleep(); 394 395             sdata = get_bss_sdata(sdata); 396             if (!check_sdata_in_driver(sdata)) 397                     return -EIO; 398 399             trace_drv_ampdu_action(local, sdata, params); 400  wlan0: moving STA 02:00:00:00:03:00 to state 3 wlan0: associated wlan0: deauthenticating from 02:00:00:00:03:00 by local choice (Reason: 3=DEAUTH_LEAVING) wlan3.sta1: Open BA session requested for 02:00:00:00:00:00 tid 0 wlan3.sta1: dropped frame to 02:00:00:00:00:00 (unauthorized port) wlan0: moving STA 02:00:00:00:03:00 to state 2 wlan0: moving STA 02:00:00:00:03:00 to state 1 wlan0: Removed STA 02:00:00:00:03:00 wlan0: Destroyed STA 02:00:00:00:03:00 BUG: unable to handle page fault for address: fffffffffffffb48 PGD 11814067 P4D 11814067 PUD 11816067 PMD 0 Oops: 0000 [#1] PREEMPT SMP PTI CPU: 2 PID: 133397 Comm: kworker/u16:1 Tainted: G        W          6.1.0-rc8-wt\u002B #59 Hardware name: QEMU Standard PC (Q35 \u002B ICH9, 2009), BIOS 1.16.0-20220807_005459-localhost 04/01/2014 Workqueue: phy3 ieee80211_ba_session_work [mac80211] RIP: 0010:drv_ampdu_action\u002B0x46/0x280 [mac80211] Code: 53 48 89 f3 be 89 01 00 00 e8 d6 43 bf ef e8 21 46 81 f0 83 bb a0 1b 00 00 04 75 0e 48 8b 9b 28 0d 00 00 48 81 eb 10 0e 00 00 \u003C8b\u003E 93 58 09 00 00 f6 c2 20 0f 84 3b 01 00 00 8b 05 dd 1c 0f 00 85 RSP: 0018:ffffc900025ebd20 EFLAGS: 00010287 RAX: 0000000000000000 RBX: fffffffffffff1f0 RCX: ffff888102228240 RDX: 0000000080000000 RSI: ffffffff918c5de0 RDI: ffff888102228b40 RBP: ffffc900025ebd40 R08: 0000000000000001 R09: 0000000000000001 R10: 0000000000000001 R11: 0000000000000000 R12: ffff888118c18ec0 R13: 0000000000000000 R14: ffffc900025ebd60 R15: ffff888018b7efb8 FS:  0000000000000000(0000) GS:ffff88817a600000(0000) knlGS:0000000000000000 CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: fffffffffffffb48 CR3: 0000000105228006 CR4: 0000000000170ee0 Call Trace:  \u003CTASK\u003E  ieee80211_tx_ba_session_handle_start\u002B0xd0/0x190 [mac80211]  ieee80211_ba_session_work\u002B0xff/0x2e0 [mac80211]  process_one_work\u002B0x29f/0x620  worker_thread\u002B0x4d/0x3d0  ? process_one_work\u002B0x620/0x620  kthread\u002B0xfb/0x120  ? kthread_complete_and_exit\u002B0x20/0x20  ret_from_fork\u002B0x22/0x30  \u003C/TASK\u003E",
  "published": "2024-08-21T07:15:04Z",
  "severity": "medium",
  "cvss": 5.5,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
  "epss": 0.00243,
  "epssPercentile": 0.15521,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "6.1.8-1",
      "fix": "DEBIAN-CVE-2022-48875",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-48875",
      "released": "2024-08-21T07:15:04Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.1.8-1",
      "fix": "DEBIAN-CVE-2022-48875",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-48875",
      "released": "2024-08-21T07:15:04Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "6.1.8-1",
      "fix": "DEBIAN-CVE-2022-48875",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-48875",
      "released": "2024-08-21T07:15:04Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T06:59:42Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}