CVE-2022-50358
In the Linux kernel, the following vulnerability has been resolved: brcmfmac: return error when getting invalid max_flowrings from dongle When firmware hit trap at initialization, host will read abnormal max_flowrings number from dongle, and it will…
Does this matter?
Lower severity and a low EPSS score (0.29%). Track it; it rarely justifies an emergency change on its own.
Description
In the Linux kernel, the following vulnerability has been resolved: brcmfmac: return error when getting invalid max_flowrings from dongle When firmware hit trap at initialization, host will read abnormal max_flowrings number from dongle, and it will cause kernel panic when doing iowrite to initialize dongle ring. To detect this error at early stage, we directly return error when getting invalid max_flowrings(>256).
- CVSS 3.1
- 4.2 MEDIUMCVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 0.29% probability · 22th percentile
- CISA KEV
- Not listed
- Affected
- linux/linux kernel
- Source
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
References
- https://git.kernel.org/stable/c/10c4b63d09a5b0ebf1b61af1dae7f25555cf58b6Patch
- https://git.kernel.org/stable/c/200347eb3b2608cc8b54c13dd1d5e03809ba2eb2Patch
- https://git.kernel.org/stable/c/2aca4f3734bd717e04943ddf340d49ab62299a00Patch
- https://git.kernel.org/stable/c/2e8bb402b060a6c22160de3d72cee057698177c8Patch
- https://git.kernel.org/stable/c/3cc9299036bdb647408e11e41de3eb1ff6d428cdPatch
- https://git.kernel.org/stable/c/87f126b25fa8562196f0f4c0aa46a446026199bfPatch
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.