CVE-2022-50169
published 2025-06-18CVE-2022-50169: In the Linux kernel, the following vulnerability has been resolved: wifi: wil6210: debugfs: fix info leak in wil_write_file_wmi() The simple_write_to_buffer()…
PriorityP427high7.1CVSS 3.1
AVLACLPRLUINSUCHINAH
EPSS
0.21%
11.8th percentile
In the Linux kernel, the following vulnerability has been resolved:
wifi: wil6210: debugfs: fix info leak in wil_write_file_wmi()
The simple_write_to_buffer() function will succeed if even a single
byte is initialized. However, we need to initialize the whole buffer
to prevent information leaks. Just use memdup_user().
Affected
21 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.0.2-1 (bookworm) | linux 6.0.2-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= ff974e4083341383d3dd4079e52ed30f57f376f0 < c1216e699a1ce83ea005510844bd7508d34c6cef | c1216e699a1ce83ea005510844bd7508d34c6cef |
| linux | linux | >= ff974e4083341383d3dd4079e52ed30f57f376f0 < 4615458db7793fadc6d546ac3564b36819e77a22 | 4615458db7793fadc6d546ac3564b36819e77a22 |
| linux | linux | >= ff974e4083341383d3dd4079e52ed30f57f376f0 < 60c9983425167ec5073c628d83a6875760d18059 | 60c9983425167ec5073c628d83a6875760d18059 |
| linux | linux | >= ff974e4083341383d3dd4079e52ed30f57f376f0 < 05ceda14ef7c73104e709c414c3680d8a59f51d4 | 05ceda14ef7c73104e709c414c3680d8a59f51d4 |
| linux | linux | >= ff974e4083341383d3dd4079e52ed30f57f376f0 < 074e865b37da55aa87baa16d68b96896f85f8adb | 074e865b37da55aa87baa16d68b96896f85f8adb |
| linux | linux | >= ff974e4083341383d3dd4079e52ed30f57f376f0 < 789edc1af9c1a2293956e8534bfef3d18d629de9 | 789edc1af9c1a2293956e8534bfef3d18d629de9 |
| linux | linux | >= ff974e4083341383d3dd4079e52ed30f57f376f0 < 67470920cd3f3cb38699b1ad23234f96bead4d21 | 67470920cd3f3cb38699b1ad23234f96bead4d21 |
| linux | linux | >= ff974e4083341383d3dd4079e52ed30f57f376f0 < 7a4836560a6198d245d5732e26f94898b12eb760 | 7a4836560a6198d245d5732e26f94898b12eb760 |
| linux | linux_kernel | >= 0 < 5.10.140-1 | 5.10.140-1 |
| linux | linux_kernel | >= 0 < 6.0.2-1 | 6.0.2-1 |
| linux | linux_kernel | >= 0 < 6.0.2-1 | 6.0.2-1 |
| linux | linux_kernel | >= 0 < 6.0.2-1 | 6.0.2-1 |
| linux | linux_kernel | >= 3.17 < 4.14.291 | 4.14.291 |
| linux | linux_kernel | >= 4.15 < 4.19.256 | 4.19.256 |
| linux | linux_kernel | >= 4.20 < 5.4.211 | 5.4.211 |
| linux | linux_kernel | >= 5.11 < 5.15.61 | 5.15.61 |
| linux | linux_kernel | >= 5.16 < 5.18.18 | 5.18.18 |
| linux | linux_kernel | >= 5.19 < 5.19.2 | 5.19.2 |
| linux | linux_kernel | >= 5.5 < 5.10.137 | 5.10.137 |
CVSS provenance
nvdv3.17.1HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
osv7.1HIGH
vendor_debian7.1HIGH
vendor_redhat7.1HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: wifi: wil6210: debugfs: fix info leak in wil_write_file_wmi()
vendor_redhat·2025-06-18·CVSS 7.1
CVE-2022-50169 [HIGH] kernel: wifi: wil6210: debugfs: fix info leak in wil_write_file_wmi()
kernel: wifi: wil6210: debugfs: fix info leak in wil_write_file_wmi()
In the Linux kernel, the following vulnerability has been resolved:
wifi: wil6210: debugfs: fix info leak in wil_write_file_wmi()
The simple_write_to_buffer() function will succeed if even a single
byte is initialized. However, we need to initialize the whole buffer
to prevent information leaks. Just use memdup_user().
Statement: A sensitive information leak was discovered in the wil6210 WiFi driver’s wil_write_file_wmi() debugfs interface. The previous implementation used simple_write_to_buffer() without zero-initializing the buffer, potentially exposing uninitialized kernel memory to user space. This issue is resolved by using memdup_user() instead. The vulnerability can be exploited by local users with access to the
Debian
CVE-2022-50169: linux - In the Linux kernel, the following vulnerability has been resolved: wifi: wil62...
vendor_debian·2022·CVSS 7.1
CVE-2022-50169 [HIGH] CVE-2022-50169: linux - In the Linux kernel, the following vulnerability has been resolved: wifi: wil62...
In the Linux kernel, the following vulnerability has been resolved: wifi: wil6210: debugfs: fix info leak in wil_write_file_wmi() The simple_write_to_buffer() function will succeed if even a single byte is initialized. However, we need to initialize the whole buffer to prevent information leaks. Just use memdup_user().
Scope: local
bookworm: resolved (fixed in 6.0.2-1)
bullseye: resolved (fixed in 5.10.140-1)
forky: resolved (fixed in 6.0.2-1)
sid: resolved (fixed in 6.0.2-1)
trixie: resolved (fixed in 6.0.2-1)
OSV
CVE-2022-50169: In the Linux kernel, the following vulnerability has been resolved: wifi: wil6210: debugfs: fix info leak in wil_write_file_wmi() The simple_write_to_
osv·2025-06-18·CVSS 7.1
CVE-2022-50169 [HIGH] CVE-2022-50169: In the Linux kernel, the following vulnerability has been resolved: wifi: wil6210: debugfs: fix info leak in wil_write_file_wmi() The simple_write_to_
In the Linux kernel, the following vulnerability has been resolved: wifi: wil6210: debugfs: fix info leak in wil_write_file_wmi() The simple_write_to_buffer() function will succeed if even a single byte is initialized. However, we need to initialize the whole buffer to prevent information leaks. Just use memdup_user().
GHSA
GHSA-3g5v-28p4-h3v9: In the Linux kernel, the following vulnerability has been resolved:
wifi: wil6210: debugfs: fix info leak in wil_write_file_wmi()
The simple_write_t
ghsa_unreviewed·2025-06-18
CVE-2022-50169 [HIGH] CWE-909 GHSA-3g5v-28p4-h3v9: In the Linux kernel, the following vulnerability has been resolved:
wifi: wil6210: debugfs: fix info leak in wil_write_file_wmi()
The simple_write_t
In the Linux kernel, the following vulnerability has been resolved:
wifi: wil6210: debugfs: fix info leak in wil_write_file_wmi()
The simple_write_to_buffer() function will succeed if even a single
byte is initialized. However, we need to initialize the whole buffer
to prevent information leaks. Just use memdup_user().
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/05ceda14ef7c73104e709c414c3680d8a59f51d4https://git.kernel.org/stable/c/074e865b37da55aa87baa16d68b96896f85f8adbhttps://git.kernel.org/stable/c/4615458db7793fadc6d546ac3564b36819e77a22https://git.kernel.org/stable/c/60c9983425167ec5073c628d83a6875760d18059https://git.kernel.org/stable/c/67470920cd3f3cb38699b1ad23234f96bead4d21https://git.kernel.org/stable/c/789edc1af9c1a2293956e8534bfef3d18d629de9https://git.kernel.org/stable/c/7a4836560a6198d245d5732e26f94898b12eb760https://git.kernel.org/stable/c/c1216e699a1ce83ea005510844bd7508d34c6cef
2025-06-18
Published