CVE-2022-50714Use of Uninitialized Variable in Linux

Severity
4.7MEDIUM
No vector
EPSS
0.0%
top 93.24%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedDec 24

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921e: fix rmmod crash in driver reload test In insmod/rmmod stress test, the following crash dump shows up immediately. The problem is caused by missing mt76_dev in mt7921_pci_remove(). We should make sure the drvdata is ready before probe() finished. [168.862789] ================================================================== [168.862797] BUG: KASAN: user-memory-access in try_to_grab_pending+0x59/0x480 [168

Affected Packages4 packages

Linuxlinux/linux_kernel5.18.05.19.17+1
Debianlinux/linux_kernel< 6.0.3-1+2
CVEListV5linux/linux1c71e03afe4b457a15e50de40006b927dfc007551034d8e08508830161377f136a060e78fc24f2a5+3
debiandebian/linux< linux 6.0.3-1 (bookworm)

🔴Vulnerability Details

3
OSV
CVE-2022-50714: In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921e: fix rmmod crash in driver reload test In insmod/rmmod stress2025-12-24
GHSA
GHSA-265p-gc7h-x375: In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921e: fix rmmod crash in driver reload test In insmod/rmmod stres2025-12-24
OSV
wifi: mt76: mt7921e: fix rmmod crash in driver reload test2025-12-24

📋Vendor Advisories

2
Red Hat
kernel: Linux kernel: Denial of Service in mt7921e driver during module unload2025-12-24
Debian
CVE-2022-50714: linux - In the Linux kernel, the following vulnerability has been resolved: wifi: mt76:...2022

🕵️Threat Intelligence

1
Wiz
CVE-2022-50714 Impact, Exploitability, and Mitigation Steps | Wiz