CVE-2022-50321
published 2025-09-15CVE-2022-50321: In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: fix potential memory leak in brcmf_netdev_start_xmit() The…
PriorityP416medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.15%
4.3th percentile
In the Linux kernel, the following vulnerability has been resolved:
wifi: brcmfmac: fix potential memory leak in brcmf_netdev_start_xmit()
The brcmf_netdev_start_xmit() returns NETDEV_TX_OK without freeing skb
in case of pskb_expand_head() fails, add dev_kfree_skb() to fix it.
Compile tested only.
Affected
21 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.20-1 (bookworm) | linux 6.1.20-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 270a6c1f65fe68a28a5d39cd405592c550b496c7 < 4c55fdebc1c358de96bfab52ed309d58a3ba66ef | 4c55fdebc1c358de96bfab52ed309d58a3ba66ef |
| linux | linux | >= 270a6c1f65fe68a28a5d39cd405592c550b496c7 < e5d01e85cf46628647cd696cb72ba4659b18967f | e5d01e85cf46628647cd696cb72ba4659b18967f |
| linux | linux | >= 270a6c1f65fe68a28a5d39cd405592c550b496c7 < d869a189505224601e310c7769cb90b0e2f60b31 | d869a189505224601e310c7769cb90b0e2f60b31 |
| linux | linux | >= 270a6c1f65fe68a28a5d39cd405592c550b496c7 < e08e6812efb6a8c676e733de0518594d1517e0d9 | e08e6812efb6a8c676e733de0518594d1517e0d9 |
| linux | linux | >= 270a6c1f65fe68a28a5d39cd405592c550b496c7 < e8ef89e5b89ee041a94eecfb6c31fcc237f9168c | e8ef89e5b89ee041a94eecfb6c31fcc237f9168c |
| linux | linux | >= 270a6c1f65fe68a28a5d39cd405592c550b496c7 < 7f159116d620615779adbf88a5d94713702216d8 | 7f159116d620615779adbf88a5d94713702216d8 |
| linux | linux | >= 270a6c1f65fe68a28a5d39cd405592c550b496c7 < 3a4d18318f473e97d628f410215b3fac32d07aed | 3a4d18318f473e97d628f410215b3fac32d07aed |
| linux | linux | >= 270a6c1f65fe68a28a5d39cd405592c550b496c7 < 212fde3fe76e962598ce1d47b97cc78afdfc71b3 | 212fde3fe76e962598ce1d47b97cc78afdfc71b3 |
| linux | linux_kernel | >= 0 < 5.10.178-1 | 5.10.178-1 |
| linux | linux_kernel | >= 0 < 6.1.20-1 | 6.1.20-1 |
| linux | linux_kernel | >= 0 < 6.1.20-1 | 6.1.20-1 |
| linux | linux_kernel | >= 0 < 6.1.20-1 | 6.1.20-1 |
| linux | linux_kernel | >= 4.13 < 4.14.308 | 4.14.308 |
| linux | linux_kernel | >= 4.15 < 4.19.276 | 4.19.276 |
| linux | linux_kernel | >= 4.20 < 5.4.235 | 5.4.235 |
| linux | linux_kernel | >= 5.11 < 5.15.99 | 5.15.99 |
| linux | linux_kernel | >= 5.16 < 6.1.16 | 6.1.16 |
| linux | linux_kernel | >= 5.5 < 5.10.173 | 5.10.173 |
| linux | linux_kernel | >= 6.2 < 6.2.3 | 6.2.3 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: wifi: brcmfmac: fix potential memory leak in brcmf_netdev_start_xmit()
vendor_redhat·2025-09-15·CVSS 5.5
CVE-2022-50321 [MEDIUM] CWE-401 kernel: wifi: brcmfmac: fix potential memory leak in brcmf_netdev_start_xmit()
kernel: wifi: brcmfmac: fix potential memory leak in brcmf_netdev_start_xmit()
In the Linux kernel, the following vulnerability has been resolved:
wifi: brcmfmac: fix potential memory leak in brcmf_netdev_start_xmit()
The brcmf_netdev_start_xmit() returns NETDEV_TX_OK without freeing skb
in case of pskb_expand_head() fails, add dev_kfree_skb() to fix it.
Compile tested only.
Statement: This issue results in a memory leak when pskb_expand_head() fails in brcmf_netdev_start_xmit(). While it can lead to gradual resource exhaustion under repeated error conditions, exploitation for privilege escalation or information disclosure is not realistic. The practical impact is limited to potential denial of service (resource exhaustion) under heavy load.
Mitigation: To mitigate this issue, prevent m
Debian
CVE-2022-50321: linux - In the Linux kernel, the following vulnerability has been resolved: wifi: brcmf...
vendor_debian·2022·CVSS 5.5
CVE-2022-50321 [MEDIUM] CVE-2022-50321: linux - In the Linux kernel, the following vulnerability has been resolved: wifi: brcmf...
In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: fix potential memory leak in brcmf_netdev_start_xmit() The brcmf_netdev_start_xmit() returns NETDEV_TX_OK without freeing skb in case of pskb_expand_head() fails, add dev_kfree_skb() to fix it. Compile tested only.
Scope: local
bookworm: resolved (fixed in 6.1.20-1)
bullseye: resolved (fixed in 5.10.178-1)
forky: resolved (fixed in 6.1.20-1)
sid: resolved (fixed in 6.1.20-1)
trixie: resolved (fixed in 6.1.20-1)
GHSA
GHSA-m3m6-8jj6-96q6: In the Linux kernel, the following vulnerability has been resolved:
wifi: brcmfmac: fix potential memory leak in brcmf_netdev_start_xmit()
The brcmf
ghsa_unreviewed·2025-09-15
CVE-2022-50321 [MEDIUM] CWE-401 GHSA-m3m6-8jj6-96q6: In the Linux kernel, the following vulnerability has been resolved:
wifi: brcmfmac: fix potential memory leak in brcmf_netdev_start_xmit()
The brcmf
In the Linux kernel, the following vulnerability has been resolved:
wifi: brcmfmac: fix potential memory leak in brcmf_netdev_start_xmit()
The brcmf_netdev_start_xmit() returns NETDEV_TX_OK without freeing skb
in case of pskb_expand_head() fails, add dev_kfree_skb() to fix it.
Compile tested only.
OSV
CVE-2022-50321: In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: fix potential memory leak in brcmf_netdev_start_xmit() The brcmf_n
osv·2025-09-15·CVSS 5.5
CVE-2022-50321 [MEDIUM] CVE-2022-50321: In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: fix potential memory leak in brcmf_netdev_start_xmit() The brcmf_n
In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: fix potential memory leak in brcmf_netdev_start_xmit() The brcmf_netdev_start_xmit() returns NETDEV_TX_OK without freeing skb in case of pskb_expand_head() fails, add dev_kfree_skb() to fix it. Compile tested only.
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/212fde3fe76e962598ce1d47b97cc78afdfc71b3https://git.kernel.org/stable/c/3a4d18318f473e97d628f410215b3fac32d07aedhttps://git.kernel.org/stable/c/4c55fdebc1c358de96bfab52ed309d58a3ba66efhttps://git.kernel.org/stable/c/7f159116d620615779adbf88a5d94713702216d8https://git.kernel.org/stable/c/d869a189505224601e310c7769cb90b0e2f60b31https://git.kernel.org/stable/c/e08e6812efb6a8c676e733de0518594d1517e0d9https://git.kernel.org/stable/c/e5d01e85cf46628647cd696cb72ba4659b18967fhttps://git.kernel.org/stable/c/e8ef89e5b89ee041a94eecfb6c31fcc237f9168c
2025-09-15
Published