What’s Vulnerable › Vulnerabilities

CVE-2022-49544: ipw2x00: Fix potential NULL dereference in libipw_xmit()

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-02-26 · updated 2026-06-17
• Weakness: CWE-476

Description

In the Linux kernel, the following vulnerability has been resolved: ipw2x00: Fix potential NULL dereference in libipw_xmit() crypt and crypt->ops could be null, so we need to checking null before dereference

Affected products

• Linux kernel: before 4.9.318; from 4.10 before 4.14.283; from 4.15 before 4.19.247; from 4.20 before 5.4.198; from 5.5 before 5.10.121; from 5.11 before 5.15.46 — fixed in 4.14.283, 4.19.247, 4.9.318, 5.10.121, 5.15.46, 5.17.14

How to fix

Upgrade to a fixed version: Linux kernel 4.14.283, 4.19.247, 4.9.318, 5.10.121. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/167affc11781d7d35c4c3a7630a549ac74dd0b21
• https://git.kernel.org/stable/c/1ff6b0727c8988f25eeb670b6c038c1120bb58dd
• https://git.kernel.org/stable/c/48d4a820fd33f012e5f63735a59d15b5a3882882
• https://git.kernel.org/stable/c/528d2023ccf4748fd542582955236c1634a7d293
• https://git.kernel.org/stable/c/5f7ea274e88c0eeffe6bd6dbf6cf5c479d356af6
• https://git.kernel.org/stable/c/8fb1b9beb085bb767ae43e441db5ac6fcd66a04d
• https://git.kernel.org/stable/c/98d1dc32f890642476dbb78ed3437a456bf421b0
• https://git.kernel.org/stable/c/b4628e0d3754ab2fc98ee6e3d21851ba45798077
• https://git.kernel.org/stable/c/e8366bbabe1d207cf7c5b11ae50e223ae6fc278b

Get alerted when CVE-2022-49544 or the next vulnerability affects your stack