CVE-2022-50164

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

wifi: iwlwifi: mvm: fix double list_add at iwl_mvm_mac_wake_tx_queue

After successfull station association, if station queues are disabled for

some reason, the related lists are not emptied. So if some new element is

added to the list in iwl_mvm_mac_wake_tx_queue, it can match with the old

one and produce a BUG like this:

[ 46.535263] list_add corruption. prev->next should be next (ffff94c1c318a360), but was 0000000000000000. (prev=ffff94c1d02d3388).

[ 46.535283] ------------[ cut here ]------------

[ 46.535284] kernel BUG at lib/list_debug.c:26!

[ 46.535290] invalid opcode: 0000 [#1] PREEMPT SMP PTI

[ 46.585304] CPU: 0 PID: 623 Comm: wpa_supplicant Not tainted 5.19.0-rc3+ #1

[ 46.592380] Hardware name: Dell Inc. Inspiron 660s/0478VN , BIOS A07 08/24/2012

[ 46.600336] RIP: 0010:__list_add_valid.cold+0x3d/0x3f

[ 46.605475] Code: f2 4c 89 c1 48 89 fe 48 c7 c7 c8 40 67 93 e8 20 cc fd ff 0f 0b 48 8

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References