CVE-2022-50829 — Use After Free in Linux
Severity
6.2MEDIUM
No vectorEPSS
0.0%
top 84.94%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 30
Description
In the Linux kernel, the following vulnerability has been resolved:
wifi: ath9k: hif_usb: Fix use-after-free in ath9k_hif_usb_reg_in_cb()
It is possible that skb is freed in ath9k_htc_rx_msg(), then
usb_submit_urb() fails and we try to free skb again. It causes
use-after-free bug. Moreover, if alloc_skb() fails, urb->context becomes
NULL but rx_buf is not freed and there can be a memory leak.
The patch removes unnecessary nskb and makes skb processing more clear: it
is supposed that ath9k_htc…
Affected Packages4 packages
▶CVEListV5linux/linux3deff76095c4ac4252e27c537db3041f619c23a2 — 5e8751a977a49a6e00cce1a8da5ca16da83f9c8c+9
🔴Vulnerability Details
3GHSA▶
GHSA-m2j8-j8ph-hxxh: In the Linux kernel, the following vulnerability has been resolved:
wifi: ath9k: hif_usb: Fix use-after-free in ath9k_hif_usb_reg_in_cb()
It is poss↗2025-12-30
OSV▶
CVE-2022-50829: In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: hif_usb: Fix use-after-free in ath9k_hif_usb_reg_in_cb() It is possib↗2025-12-30