CVE-2022-48876: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-48876 affects the Linux kernel's wifi mac80211 subsystem, specifically related to the initialization of rx->link and rx->link_sta. The vulnerability was discovered in December 2022 and publicly disclosed in August 2024. It affects Linux kernel versions from 6.1 up to (excluding) 6.1.8 (NVD).

The vulnerability stems from improper initialization of rx->linksta in certain codepaths. When rx->linksta is assumed to be valid if rx->sta is valid, it can lead to a NULL pointer dereference. This issue is particularly triggered when _ieee80211rxhamsdu is called from fast-rx. The vulnerability has been assigned a CVSS v3.1 base score of 5.5 (Medium) with vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H (NVD).

The vulnerability can result in a kernel crash due to NULL pointer dereference, leading to a denial of service condition. This is evidenced by the crash dump showing a kernel NULL pointer dereference at address 0x00000000000000a8 (Kernel Patch).

The issue has been fixed by implementing a helper function to properly set rx->link and rx->link_sta initialization. The fix was committed to the Linux kernel and is available in version 6.1.8 and later. For affected systems, upgrading to a patched kernel version is recommended (Kernel Patch).