01 Record

CVE-2022-50829

wifi: ath9k: hif_usb: Fix use-after-free in ath9k_hif_usb_reg_in_cb()

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

wifi: ath9k: hif_usb: Fix use-after-free in ath9k_hif_usb_reg_in_cb()

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.28% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 20.7% of scored records. A rank, not a probability.
NVD base score: The NVD has published no score for this record
NVD CVSS vector: No NVD score to derive
NVD analysis status: Deferred. NVD last modified this record on 2026-06-17.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-12-30 12:10Z10 MO AGO

Last updated

2026-05-11 19:25Z5 MO AGO

Reserved

2025-12-30

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-416Use After FreeVariant

Data version

5.2

Document digest

c57723ed3fc7fb948958a923dff58c0efc756243085d1fe33964a6c1f5e9279f

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux3deff76095c4ac4252e27c537db3041f619c23a2 to < 5e8751a977a49a6e00cce1a8da5ca16da83f9c8c, 3deff76095c4ac4252e27c537db3041f619c23a2 to < f127c2b4c967025e5c3a4ce7e13b79135d46a33d, 3deff76095c4ac4252e27c537db3041f619c23a2 to < 0c8dd2ea4b419da96ab4953e4967e9363e2f8a4f, 3deff76095c4ac4252e27c537db3041f619c23a2 to < 988bd27de2484faf17afe0408db2e3d9e5ac61fc, 3deff76095c4ac4252e27c537db3041f619c23a2 to < 98d9172822dc6f38138333941984bd759a89d419, 3deff76095c4ac4252e27c537db3041f619c23a2 to < 355f16f756aad0c95cdaa0c14a34ab4137d32815, 3deff76095c4ac4252e27c537db3041f619c23a2 to < 53b9bb1a00c4285ee7f58a11129dbea015db61bc, 3deff76095c4ac4252e27c537db3041f619c23a2 to < 71fc0ad671a62c494d2aec731baeabd3bfe6c95d, 3deff76095c4ac4252e27c537db3041f619c23a2 to < dd95f2239fc846795fc926787c3ae0ca701c9840, 3.0—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/5e8751a977a49a6e00cce1a8da5ca16da83f9c8c
git.kernel.orghttps://git.kernel.org/stable/c/f127c2b4c967025e5c3a4ce7e13b79135d46a33d
git.kernel.orghttps://git.kernel.org/stable/c/0c8dd2ea4b419da96ab4953e4967e9363e2f8a4f
git.kernel.orghttps://git.kernel.org/stable/c/988bd27de2484faf17afe0408db2e3d9e5ac61fc
git.kernel.orghttps://git.kernel.org/stable/c/98d9172822dc6f38138333941984bd759a89d419
git.kernel.orghttps://git.kernel.org/stable/c/355f16f756aad0c95cdaa0c14a34ab4137d32815
git.kernel.orghttps://git.kernel.org/stable/c/53b9bb1a00c4285ee7f58a11129dbea015db61bc
git.kernel.orghttps://git.kernel.org/stable/c/71fc0ad671a62c494d2aec731baeabd3bfe6c95d
git.kernel.orghttps://git.kernel.org/stable/c/dd95f2239fc846795fc926787c3ae0ca701c9840

07 Fixed in

Debian 12

linux
Fixed in 6.1.4-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.1.4-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 6.1.4-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.