CVE-2022-48876: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-48876 affects the Linux kernel's wifi mac80211 subsystem, specifically related to the initialization of rx->link and rx->link_sta. The vulnerability was discovered in December 2022 and publicly disclosed in August 2024. It affects Linux kernel versions from 6.1 up to (excluding) 6.1.8 (NVD).

The vulnerability stems from improper initialization of rx->link_sta in certain codepaths. When rx->link_sta is assumed to be valid if rx->sta is valid, it can lead to a NULL pointer dereference. This issue is particularly triggered when __ieee80211_rx_h_amsdu is called from fast-rx. The vulnerability has been assigned a CVSS v3.1 base score of 5.5 (Medium) with vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H (NVD).

The vulnerability can result in a kernel crash due to NULL pointer dereference, leading to a denial of service condition. This is evidenced by the crash dump showing a kernel NULL pointer dereference at address 0x00000000000000a8 (Kernel Patch).

The vulnerability requires local access with low privileges to exploit. It specifically affects systems using the Linux kernel's wifi mac80211 subsystem and can be triggered through the wireless networking stack (NVD).

The issue has been fixed by implementing a helper function to properly set rx->link and rx->link_sta initialization. The fix was committed to the Linux kernel and is available in version 6.1.8 and later. For affected systems, upgrading to a patched kernel version is recommended (Kernel Patch).