01 Record

CVE-2022-50551

wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmf_fw_alloc_request()

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmf_fw_alloc_request()

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.22% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 12.8% of scored records. A rank, not a probability.
NVD base score: 7.1 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
NVD analysis status: Analyzed. NVD last modified this record on 2026-06-17.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-10-07 15:21Z1 YR AGO

Last updated

2026-05-11 19:21Z5 MO AGO

Reserved

2025-10-07

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-125Out-of-bounds ReadBase
CWE-682Incorrect CalculationPillar

Data version

5.2

Document digest

fc74e11d030e89b91a0e5333e66d6a6a7236917b95f93e9c64a28fbd2082a042

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux46d703a775394e4724509ff55cdda41d228c028c to < 1db036d13e10809943c2dce553e2fa7fc9c6cd80, 46d703a775394e4724509ff55cdda41d228c028c to < bc45aa1911bf699b9905f12414e3c1879d6b784f, 46d703a775394e4724509ff55cdda41d228c028c to < 4c8fc44c44b97854623c56363c359f711fc0b887, 46d703a775394e4724509ff55cdda41d228c028c to < 9d2f70fa2c7cc6c73a420ff15682454782d3d6f6, 46d703a775394e4724509ff55cdda41d228c028c to < 5b06a8a25eba07628313aa3c5496522eff97be53, 46d703a775394e4724509ff55cdda41d228c028c to < 87792567d9ed93fd336d2c3b8d7870f44e141e6d, 46d703a775394e4724509ff55cdda41d228c028c to < 0b12d2aa264bac35bff9b5399bb162262b2b8949, 46d703a775394e4724509ff55cdda41d228c028c to < 579c9b9838e8a73f6e93ddece07972c241514dcc, 46d703a775394e4724509ff55cdda41d228c028c to < ffb589963df103caaf062081a32db0b9e1798660, 46d703a775394e4724509ff55cdda41d228c028c to < 81d17f6f3331f03c8eafdacea68ab773426c1e3c, 4.5—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/1db036d13e10809943c2dce553e2fa7fc9c6cd80
git.kernel.orghttps://git.kernel.org/stable/c/bc45aa1911bf699b9905f12414e3c1879d6b784f
git.kernel.orghttps://git.kernel.org/stable/c/4c8fc44c44b97854623c56363c359f711fc0b887
git.kernel.orghttps://git.kernel.org/stable/c/9d2f70fa2c7cc6c73a420ff15682454782d3d6f6
git.kernel.orghttps://git.kernel.org/stable/c/5b06a8a25eba07628313aa3c5496522eff97be53
git.kernel.orghttps://git.kernel.org/stable/c/87792567d9ed93fd336d2c3b8d7870f44e141e6d
git.kernel.orghttps://git.kernel.org/stable/c/0b12d2aa264bac35bff9b5399bb162262b2b8949
git.kernel.orghttps://git.kernel.org/stable/c/579c9b9838e8a73f6e93ddece07972c241514dcc
git.kernel.orghttps://git.kernel.org/stable/c/ffb589963df103caaf062081a32db0b9e1798660
git.kernel.orghttps://git.kernel.org/stable/c/81d17f6f3331f03c8eafdacea68ab773426c1e3c

07 Fixed in

Debian 12

linux
Fixed in 6.1.4-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.1.4-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 6.1.4-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.