CVE-2022-50732
published 2025-12-24CVE-2022-50732: In the Linux kernel, the following vulnerability has been resolved: staging: rtl8192u: Fix use after free in ieee80211_rx() We cannot dereference the "skb"…
PriorityP345high8.8CVSS 3.1
AVAACLPRNUINSUCHIHAH
EPSS
0.42%
35.0th percentile
In the Linux kernel, the following vulnerability has been resolved:
staging: rtl8192u: Fix use after free in ieee80211_rx()
We cannot dereference the "skb" pointer after calling
ieee80211_monitor_rx(), because it is a use after free.
Affected
23 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.4-1 (bookworm) | linux 6.1.4-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 8fc8598e61f6f384f3eaf1d9b09500c12af47b37 < 9c03db0ec84b7964a11b20706665c99a5fead332 | 9c03db0ec84b7964a11b20706665c99a5fead332 |
| linux | linux | >= 8fc8598e61f6f384f3eaf1d9b09500c12af47b37 < fdc62d31d50e4ce5d8f363fcb8299ba0e00ee6fd | fdc62d31d50e4ce5d8f363fcb8299ba0e00ee6fd |
| linux | linux | >= 8fc8598e61f6f384f3eaf1d9b09500c12af47b37 < a0df8d44b555ae09729d6533fd4532977563c7b9 | a0df8d44b555ae09729d6533fd4532977563c7b9 |
| linux | linux | >= 8fc8598e61f6f384f3eaf1d9b09500c12af47b37 < 288ada16a93aab5aa2ebea8190aafdb35b716854 | 288ada16a93aab5aa2ebea8190aafdb35b716854 |
| linux | linux | >= 8fc8598e61f6f384f3eaf1d9b09500c12af47b37 < daa8045a991363ccdae5615d170f35aa1135e7a7 | daa8045a991363ccdae5615d170f35aa1135e7a7 |
| linux | linux | >= 8fc8598e61f6f384f3eaf1d9b09500c12af47b37 < b0aaec894a909c88117c8bda6c7c9b26cf7c744b | b0aaec894a909c88117c8bda6c7c9b26cf7c744b |
| linux | linux | >= 8fc8598e61f6f384f3eaf1d9b09500c12af47b37 < de174163c0d319ff06d622e79130a0017c8f5a6e | de174163c0d319ff06d622e79130a0017c8f5a6e |
| linux | linux | >= 8fc8598e61f6f384f3eaf1d9b09500c12af47b37 < 73df1172bbcc8d45cd28e3b1a9ca2edb2f9f7ce6 | 73df1172bbcc8d45cd28e3b1a9ca2edb2f9f7ce6 |
| linux | linux | >= 8fc8598e61f6f384f3eaf1d9b09500c12af47b37 < bcc5e2dcf09089b337b76fc1a589f6ff95ca19ac | bcc5e2dcf09089b337b76fc1a589f6ff95ca19ac |
| linux | linux_kernel | >= 0 < 5.10.178-1 | 5.10.178-1 |
| linux | linux_kernel | >= 0 < 6.1.4-1 | 6.1.4-1 |
| linux | linux_kernel | >= 0 < 6.1.4-1 | 6.1.4-1 |
| linux | linux_kernel | >= 0 < 6.1.4-1 | 6.1.4-1 |
| linux | linux_kernel | >= 2.6.33 < 4.9.337 | 4.9.337 |
| linux | linux_kernel | >= 4.10.0 < 4.14.303 | 4.14.303 |
| linux | linux_kernel | >= 4.15.0 < 4.19.270 | 4.19.270 |
| linux | linux_kernel | >= 4.20.0 < 5.4.229 | 5.4.229 |
| linux | linux_kernel | >= 5.11.0 < 5.15.86 | 5.15.86 |
| linux | linux_kernel | >= 5.16.0 < 6.0.16 | 6.0.16 |
| linux | linux_kernel | >= 5.5.0 < 5.10.163 | 5.10.163 |
| linux | linux_kernel | >= 6.1.0 < 6.1.2 | 6.1.2 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: staging: rtl8192u: Fix use after free in ieee80211_rx()
vendor_redhat·2025-12-24
CVE-2022-50732 kernel: staging: rtl8192u: Fix use after free in ieee80211_rx()
kernel: staging: rtl8192u: Fix use after free in ieee80211_rx()
In the Linux kernel, the following vulnerability has been resolved:
staging: rtl8192u: Fix use after free in ieee80211_rx()
We cannot dereference the "skb" pointer after calling
ieee80211_monitor_rx(), because it is a use after free.
Package: kernel (Red Hat Enterprise Linux 10) - Not affected
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 7) - Not affected
Package: kernel (Red Hat Enterprise Linux 8) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 8) - Not affected
Package: kernel (Red Hat Enterprise Linux 9) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 9) - Not affected
Debian
CVE-2022-50732: linux - In the Linux kernel, the following vulnerability has been resolved: staging: rt...
vendor_debian·2022
CVE-2022-50732 CVE-2022-50732: linux - In the Linux kernel, the following vulnerability has been resolved: staging: rt...
In the Linux kernel, the following vulnerability has been resolved: staging: rtl8192u: Fix use after free in ieee80211_rx() We cannot dereference the "skb" pointer after calling ieee80211_monitor_rx(), because it is a use after free.
Scope: local
bookworm: resolved (fixed in 6.1.4-1)
bullseye: resolved (fixed in 5.10.178-1)
forky: resolved (fixed in 6.1.4-1)
sid: resolved (fixed in 6.1.4-1)
trixie: resolved (fixed in 6.1.4-1)
VulDB
Linux Kernel up to 6.1.1 rtl8192u ieee80211_rx use after free (Nessus ID 279999 / WID-SEC-2025-2929)
vuldb·2026-04-21
CVE-2022-50732 [CRITICAL] Linux Kernel up to 6.1.1 rtl8192u ieee80211_rx use after free (Nessus ID 279999 / WID-SEC-2025-2929)
A vulnerability has been found in Linux Kernel up to 6.1.1 and classified as critical. This affects the function ieee80211_rx of the component rtl8192u. Performing a manipulation results in use after free.
This vulnerability is reported as CVE-2022-50732. The attacker must have access to the local network to execute the attack. No exploit exists.
The affected component should be upgraded.
OSV
CVE-2022-50732: In the Linux kernel, the following vulnerability has been resolved: staging: rtl8192u: Fix use after free in ieee80211_rx() We cannot dereference the
osv·2025-12-24
CVE-2022-50732 CVE-2022-50732: In the Linux kernel, the following vulnerability has been resolved: staging: rtl8192u: Fix use after free in ieee80211_rx() We cannot dereference the
In the Linux kernel, the following vulnerability has been resolved: staging: rtl8192u: Fix use after free in ieee80211_rx() We cannot dereference the "skb" pointer after calling ieee80211_monitor_rx(), because it is a use after free.
GHSA
GHSA-v23g-73pc-f58m: In the Linux kernel, the following vulnerability has been resolved:
staging: rtl8192u: Fix use after free in ieee80211_rx()
We cannot dereference th
ghsa_unreviewed·2025-12-24
CVE-2022-50732 GHSA-v23g-73pc-f58m: In the Linux kernel, the following vulnerability has been resolved:
staging: rtl8192u: Fix use after free in ieee80211_rx()
We cannot dereference th
In the Linux kernel, the following vulnerability has been resolved:
staging: rtl8192u: Fix use after free in ieee80211_rx()
We cannot dereference the "skb" pointer after calling
ieee80211_monitor_rx(), because it is a use after free.
OSV
staging: rtl8192u: Fix use after free in ieee80211_rx()
osv·2025-12-24
CVE-2022-50732 staging: rtl8192u: Fix use after free in ieee80211_rx()
staging: rtl8192u: Fix use after free in ieee80211_rx()
In the Linux kernel, the following vulnerability has been resolved:
staging: rtl8192u: Fix use after free in ieee80211_rx()
We cannot dereference the "skb" pointer after calling
ieee80211_monitor_rx(), because it is a use after free.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2022-50732 kernel: staging: rtl8192u: Fix use after free in ieee80211_rx()
bugzilla·2025-12-24
CVE-2022-50732 CVE-2022-50732 kernel: staging: rtl8192u: Fix use after free in ieee80211_rx()
CVE-2022-50732 kernel: staging: rtl8192u: Fix use after free in ieee80211_rx()
In the Linux kernel, the following vulnerability has been resolved:
staging: rtl8192u: Fix use after free in ieee80211_rx()
We cannot dereference the "skb" pointer after calling
ieee80211_monitor_rx(), because it is a use after free.
Discussion:
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2025122420-CVE-2022-50732-042c@gregkh/T
Wiz
CVE-2022-50732 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz
CVE-2022-50732 CVE-2022-50732 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2022-50732 :
Linux Kernel vulnerability analysis and mitigation
In the Linux kernel, the following vulnerability has been resolved:
staging: rtl8192u: Fix use after free in ieee80211_rx()
We cannot dereference the "skb" pointer after calling
ieee80211_monitor_rx(), because it is a use after free.
Source : NVD
Published December 24, 2025
CNA Score N/A
Affected Technologies
Linux Kernel
Linux Debian
Has Public Exploit No
Has CISA KEV Exploit No
CISA KEV Release Date N/A
CISA KEV Due Date N/A
Exploitation Probability Percentile (EPSS) 15.2
Exploitation Probability (EPSS) N/A
Affected packages and libraries
linux-kvm
linux-aws-5.4
Sources
NVD
Debian 11, 12, 13, 14 Has Fix Added at: Dec 26, 2025
Echo Has Fix Added at: Dec 26, 2025
Ubuntu 14.04, 22.04 Severity MEDI
https://git.kernel.org/stable/c/288ada16a93aab5aa2ebea8190aafdb35b716854https://git.kernel.org/stable/c/73df1172bbcc8d45cd28e3b1a9ca2edb2f9f7ce6https://git.kernel.org/stable/c/9c03db0ec84b7964a11b20706665c99a5fead332https://git.kernel.org/stable/c/a0df8d44b555ae09729d6533fd4532977563c7b9https://git.kernel.org/stable/c/b0aaec894a909c88117c8bda6c7c9b26cf7c744bhttps://git.kernel.org/stable/c/bcc5e2dcf09089b337b76fc1a589f6ff95ca19achttps://git.kernel.org/stable/c/daa8045a991363ccdae5615d170f35aa1135e7a7https://git.kernel.org/stable/c/de174163c0d319ff06d622e79130a0017c8f5a6ehttps://git.kernel.org/stable/c/fdc62d31d50e4ce5d8f363fcb8299ba0e00ee6fd
2025-12-24
Published