What is CVE-2022-49646?

CVE-2022-49646 is a medium-severity vulnerability in Linux. CVSS score: 5.5/10. Published 2025-02-26.

How severe is CVE-2022-49646?

Medium severity. CVSS v3 base score is 5.5 out of 10.

Vulnerability in Linux

CVE-2022-49646

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix queue selection for mesh/OCB interfaces When using iTXQ, the code assumes that there is only one vif queue for broadcast packets, using the BE queue. Allowing non-BE queue marking violates that assumption and txq->ac == skb_queue_mapping is no longer guaranteed. This can cause issues with queue handling in the driver and also causes issues with the recent ATF change, resulting in an AQL underflow warning.

EPSS: 0.003 (18.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.

Affected products

Linux — versions 1974da8b31e6ea9c96c21505ffcb546fa59add23, 5.2, 0
Linux Linux_kernel — versions 5.19

References

416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch)
416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch)
416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch)
416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch)
416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch)

Frequently asked questions

What is CVE-2022-49646?: CVE-2022-49646 is a medium-severity vulnerability in Linux. CVSS score: 5.5/10. Published 2025-02-26.
How severe is CVE-2022-49646?: Medium severity. CVSS v3 base score is 5.5 out of 10.