CVE-2022-50165
published 2025-06-18CVE-2022-50165: In the Linux kernel, the following vulnerability has been resolved: wifi: wil6210: debugfs: fix uninitialized variable use in `wil_write_file_wmi()` Commit…
PriorityP418medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.20%
10.4th percentile
In the Linux kernel, the following vulnerability has been resolved:
wifi: wil6210: debugfs: fix uninitialized variable use in `wil_write_file_wmi()`
Commit 7a4836560a61 changes simple_write_to_buffer() with memdup_user()
but it forgets to change the value to be returned that came from
simple_write_to_buffer() call. It results in the following warning:
warning: variable 'rc' is uninitialized when used here [-Wuninitialized]
return rc;
^~
Remove rc variable and just return the passed in length if the
memdup_user() succeeds.
Affected
21 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.0.2-1 (bookworm) | linux 6.0.2-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= ff974e4083341383d3dd4079e52ed30f57f376f0 < b13c84e877d7a3095bacb14665db304b2c00e95f | b13c84e877d7a3095bacb14665db304b2c00e95f |
| linux | linux | >= ff974e4083341383d3dd4079e52ed30f57f376f0 < c9fde3a44da566d8929070ab6bda4f0dfa9955d0 | c9fde3a44da566d8929070ab6bda4f0dfa9955d0 |
| linux | linux | >= ff974e4083341383d3dd4079e52ed30f57f376f0 < 52b11a48cf073e0aab923ae809a765d756cecf13 | 52b11a48cf073e0aab923ae809a765d756cecf13 |
| linux | linux | >= ff974e4083341383d3dd4079e52ed30f57f376f0 < 6c5fee83bdbeffe8d607d1ab125122a75f40bd1a | 6c5fee83bdbeffe8d607d1ab125122a75f40bd1a |
| linux | linux | >= ff974e4083341383d3dd4079e52ed30f57f376f0 < 689e5caf63e99e15d2f485ec297c1bf9243e0e28 | 689e5caf63e99e15d2f485ec297c1bf9243e0e28 |
| linux | linux | >= ff974e4083341383d3dd4079e52ed30f57f376f0 < d4742c886043b69d2d058bfde3998ef333b66595 | d4742c886043b69d2d058bfde3998ef333b66595 |
| linux | linux | >= ff974e4083341383d3dd4079e52ed30f57f376f0 < 409bd72e544fdf4809ea0dac337bb5a1f11a25a9 | 409bd72e544fdf4809ea0dac337bb5a1f11a25a9 |
| linux | linux | >= ff974e4083341383d3dd4079e52ed30f57f376f0 < d578e0af3a003736f6c440188b156483d451b329 | d578e0af3a003736f6c440188b156483d451b329 |
| linux | linux_kernel | >= 0 < 5.10.140-1 | 5.10.140-1 |
| linux | linux_kernel | >= 0 < 6.0.2-1 | 6.0.2-1 |
| linux | linux_kernel | >= 0 < 6.0.2-1 | 6.0.2-1 |
| linux | linux_kernel | >= 0 < 6.0.2-1 | 6.0.2-1 |
| linux | linux_kernel | >= 3.17 < 4.14.291 | 4.14.291 |
| linux | linux_kernel | >= 4.15 < 4.19.256 | 4.19.256 |
| linux | linux_kernel | >= 4.20 < 5.4.211 | 5.4.211 |
| linux | linux_kernel | >= 5.11 < 5.15.61 | 5.15.61 |
| linux | linux_kernel | >= 5.16 < 5.18.18 | 5.18.18 |
| linux | linux_kernel | >= 5.19 < 5.19.2 | 5.19.2 |
| linux | linux_kernel | >= 5.5 < 5.10.137 | 5.10.137 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
CVE-2022-50165: In the Linux kernel, the following vulnerability has been resolved: wifi: wil6210: debugfs: fix uninitialized variable use in `wil_write_file_wmi()` C
osv·2025-06-18·CVSS 5.5
CVE-2022-50165 [MEDIUM] CVE-2022-50165: In the Linux kernel, the following vulnerability has been resolved: wifi: wil6210: debugfs: fix uninitialized variable use in `wil_write_file_wmi()` C
In the Linux kernel, the following vulnerability has been resolved: wifi: wil6210: debugfs: fix uninitialized variable use in `wil_write_file_wmi()` Commit 7a4836560a61 changes simple_write_to_buffer() with memdup_user() but it forgets to change the value to be returned that came from simple_write_to_buffer() call. It results in the following warning: warning: variable 'rc' is uninitialized when used here [-Wuninitialized] return rc; ^~ Remove rc variable and just return the passed in length if the memdup_user() succeeds.
GHSA
GHSA-q529-wqg7-hj25: In the Linux kernel, the following vulnerability has been resolved:
wifi: wil6210: debugfs: fix uninitialized variable use in `wil_write_file_wmi()`
ghsa_unreviewed·2025-06-18
CVE-2022-50165 [MEDIUM] CWE-908 GHSA-q529-wqg7-hj25: In the Linux kernel, the following vulnerability has been resolved:
wifi: wil6210: debugfs: fix uninitialized variable use in `wil_write_file_wmi()`
In the Linux kernel, the following vulnerability has been resolved:
wifi: wil6210: debugfs: fix uninitialized variable use in `wil_write_file_wmi()`
Commit 7a4836560a61 changes simple_write_to_buffer() with memdup_user()
but it forgets to change the value to be returned that came from
simple_write_to_buffer() call. It results in the following warning:
warning: variable 'rc' is uninitialized when used here [-Wuninitialized]
return rc;
^~
Remove rc variable and just return the passed in length if the
memdup_user() succeeds.
Red Hat
kernel: wifi: wil6210: debugfs: fix uninitialized variable use in `wil_write_file_wmi()`
vendor_redhat·2025-06-18·CVSS 5.5
CVE-2022-50165 [MEDIUM] kernel: wifi: wil6210: debugfs: fix uninitialized variable use in `wil_write_file_wmi()`
kernel: wifi: wil6210: debugfs: fix uninitialized variable use in `wil_write_file_wmi()`
In the Linux kernel, the following vulnerability has been resolved:
wifi: wil6210: debugfs: fix uninitialized variable use in `wil_write_file_wmi()`
Commit 7a4836560a61 changes simple_write_to_buffer() with memdup_user()
but it forgets to change the value to be returned that came from
simple_write_to_buffer() call. It results in the following warning:
warning: variable 'rc' is uninitialized when used here [-Wuninitialized]
return rc;
^~
Remove rc variable and just return the passed in length if the
memdup_user() succeeds.
Statement: This patch fixes an uninitialized return value in the wil_write_file_wmi() debugfs handler, which could lead to unpredictable behavior or kernel warnings when accessed.
T
Debian
CVE-2022-50165: linux - In the Linux kernel, the following vulnerability has been resolved: wifi: wil62...
vendor_debian·2022·CVSS 5.5
CVE-2022-50165 [MEDIUM] CVE-2022-50165: linux - In the Linux kernel, the following vulnerability has been resolved: wifi: wil62...
In the Linux kernel, the following vulnerability has been resolved: wifi: wil6210: debugfs: fix uninitialized variable use in `wil_write_file_wmi()` Commit 7a4836560a61 changes simple_write_to_buffer() with memdup_user() but it forgets to change the value to be returned that came from simple_write_to_buffer() call. It results in the following warning: warning: variable 'rc' is uninitialized when used here [-Wuninitialized] return rc; ^~ Remove rc variable and just return the passed in length if the memdup_user() succeeds.
Scope: local
bookworm: resolved (fixed in 6.0.2-1)
bullseye: resolved (fixed in 5.10.140-1)
forky: resolved (fixed in 6.0.2-1)
sid: resolved (fixed in 6.0.2-1)
trixie: resolved (fixed in 6.0.2-1)
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/409bd72e544fdf4809ea0dac337bb5a1f11a25a9https://git.kernel.org/stable/c/52b11a48cf073e0aab923ae809a765d756cecf13https://git.kernel.org/stable/c/689e5caf63e99e15d2f485ec297c1bf9243e0e28https://git.kernel.org/stable/c/6c5fee83bdbeffe8d607d1ab125122a75f40bd1ahttps://git.kernel.org/stable/c/b13c84e877d7a3095bacb14665db304b2c00e95fhttps://git.kernel.org/stable/c/c9fde3a44da566d8929070ab6bda4f0dfa9955d0https://git.kernel.org/stable/c/d4742c886043b69d2d058bfde3998ef333b66595https://git.kernel.org/stable/c/d578e0af3a003736f6c440188b156483d451b329
2025-06-18
Published