-

CVE-2022-50358

In the Linux kernel, the following vulnerability has been resolved:

brcmfmac: return error when getting invalid max_flowrings from dongle

When firmware hit trap at initialization, host will read abnormal
max_flowrings number from dongle, and it will cause kernel panic when
doing iowrite to initialize dongle ring.
To detect this error at early stage, we directly return error when getting
invalid max_flowrings(>256).

Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
This information is available to logged-in users.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
VendorLinux
Product Linux
Default Statusunaffected
Version < 3cc9299036bdb647408e11e41de3eb1ff6d428cd
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Status affected
Version < 2e8bb402b060a6c22160de3d72cee057698177c8
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Status affected
Version < 10c4b63d09a5b0ebf1b61af1dae7f25555cf58b6
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Status affected
Version < 87f126b25fa8562196f0f4c0aa46a446026199bf
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Status affected
Version < 200347eb3b2608cc8b54c13dd1d5e03809ba2eb2
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Status affected
Version < 2aca4f3734bd717e04943ddf340d49ab62299a00
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Status affected
VendorLinux
Product Linux
Default Statusaffected
Version <= 5.4.*
Version 5.4.229
Status unaffected
Version <= 5.10.*
Version 5.10.163
Status unaffected
Version <= 5.15.*
Version 5.15.86
Status unaffected
Version <= 6.0.*
Version 6.0.16
Status unaffected
Version <= 6.1.*
Version 6.1.2
Status unaffected
Version <= *
Version 6.2
Status unaffected
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.03% 0.078
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string