Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: brcmfmac: return error when getting invalid max_flowrings from dongle When firmware hit trap at initialization, host will read abnormal max_flowrings number from dongle, and it will cause kernel panic when doing iowrite to initialize dongle ring. To detect this error at early stage, we directly return error when getting invalid max_flowrings(>256).
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | < 5.4.229 |
References
- https://git.kernel.org/stable/c/10c4b63d09a5b0ebf1b61af1dae7f25555cf58b6Patch
- https://git.kernel.org/stable/c/200347eb3b2608cc8b54c13dd1d5e03809ba2eb2Patch
- https://git.kernel.org/stable/c/2aca4f3734bd717e04943ddf340d49ab62299a00Patch
- https://git.kernel.org/stable/c/2e8bb402b060a6c22160de3d72cee057698177c8Patch
- https://git.kernel.org/stable/c/3cc9299036bdb647408e11e41de3eb1ff6d428cdPatch
- https://git.kernel.org/stable/c/87f126b25fa8562196f0f4c0aa46a446026199bfPatch
FAQ
What is CVE-2022-50358?
CVE-2022-50358 is a vulnerability with a CVSS score of 4.2 (MEDIUM). In the Linux kernel, the following vulnerability has been resolved: brcmfmac: return error when getting invalid max_flowrings from dongle When firmware hit trap at initialization, host will read abn...
How severe is CVE-2022-50358?
CVE-2022-50358 has been rated MEDIUM with a CVSS base score of 4.2/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-50358?
Check the references section above for vendor advisories and patch information. Affected products include: Linux Linux Kernel.