CVE-2022-50186

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-50186
In the Linux kernel, the following vulnerability has been resolved: ath11k: fix missing skb drop on htc_tx_completion error On htc_tx_completion error the skb is not dropped. This is wrong since the completion_handler logic expect the skb to be consumed anyway even when an error is triggered. Not freeing the skb on error is a memory leak since the skb won't be freed anywere else. Correctly free the packet on eid >= ATH11K_HTC_EP_COUNT before returning. Tested-on: IPQ8074 hw2.0 AHB WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/1f1483361585ae7556492f50f83f038bbdf8c294 Patch
https://git.kernel.org/stable/c/dda25326839d6e6b1fe59e79616149e44ea4eaa4 Patch
https://git.kernel.org/stable/c/e5646fe3b7ef739c392e59da7db6adf5e1fdef42 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

19 Nov 2025, 12:51

Type Values Removed Values Added
First Time Linux
Linux linux Kernel
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CWE CWE-401
References () https://git.kernel.org/stable/c/1f1483361585ae7556492f50f83f038bbdf8c294 - () https://git.kernel.org/stable/c/1f1483361585ae7556492f50f83f038bbdf8c294 - Patch
References () https://git.kernel.org/stable/c/dda25326839d6e6b1fe59e79616149e44ea4eaa4 - () https://git.kernel.org/stable/c/dda25326839d6e6b1fe59e79616149e44ea4eaa4 - Patch
References () https://git.kernel.org/stable/c/e5646fe3b7ef739c392e59da7db6adf5e1fdef42 - () https://git.kernel.org/stable/c/e5646fe3b7ef739c392e59da7db6adf5e1fdef42 - Patch
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ath11k: se corrige la falta de eliminación de skb en el error htc_tx_completion. En el error htc_tx_completion, el skb no se elimina. Esto es incorrecto, ya que la lógica de completion_handler espera que el skb se consuma de todas formas, incluso cuando se produce un error. No liberar el skb en caso de error supone una fuga de memoria, ya que no se liberará en ningún otro lugar. Libere correctamente el paquete en eid >= ATH11K_HTC_EP_COUNT antes de regresar. Probado en: IPQ8074 hw2.0 AHB WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1

18 Jun 2025, 11:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-06-18 11:15

Updated : 2025-11-19 12:51

NVD link : CVE-2022-50186

Mitre link : CVE-2022-50186

CVE.ORG link : CVE-2022-50186

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-401

Missing Release of Memory after Effective Lifetime