CVE-2022-49503: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-49503 affects the Linux kernel's ath9k_htc wireless driver component. The vulnerability was discovered in the handling of rxstatus->rs_keyix values in the ath9k_cmn_rx_accept() function, where untrusted data could be passed to test_bit() function potentially leading to out-of-bounds access (Kernel Commit).

The vulnerability exists in the drivers/net/wireless/ath/ath9k/common.c file at line 46 in the ath9k_cmn_rx_accept() function. The issue occurs when rxstatus->rs_keyix is passed to test_bit() without proper validation, potentially allowing access outside the intended bitmap boundaries. The fix involves adding validation to ensure rxstatus->rs_keyix is within ATH_KEYMAX bounds or equals ATH9K_RXKEYIX_INVALID (Kernel Commit).

The vulnerability could allow an attacker to cause out-of-bounds memory access in the Linux kernel's wireless networking stack, potentially leading to system crashes or other undefined behavior (NVD).

The vulnerability requires the attacker to have access to the wireless interface using the ath9k_htc driver. The issue can be triggered by sending specially crafted wireless packets that contain invalid rxstatus->rs_keyix values (Ubuntu Security).

The vulnerability has been patched in various Linux kernel versions. Ubuntu has released fixes for multiple kernel versions including 4.15.0-192.203 for Ubuntu 18.04 LTS and 5.4.0-126.142~18.04.1 for Ubuntu 18.04 LTS with HWE. Users should update their kernel to the latest available version that includes the fix (Ubuntu Security).