CVE-2022-50709 wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()

🗓️ 24 Dec 2025 10:55:23Reported by LinuxType

Fix uninitialized read in ath9k_htc_rx_msg by validating pkt_len in ath9k_hif_usb_rx_stream.

Reporter	Title	Published	Views	Family All 310
AstraLinux	Astra Linux - уязвимость в linux-5.10, linux	20 May 202605:53	–	astralinux
Circl	CVE-2022-50709	24 Dec 202512:20	–	circl
CNNVD	Linux kernel 安全漏洞	24 Dec 202500:00	–	cnnvd
CVE	CVE-2022-50709	24 Dec 202510:55	–	cve
Debian CVE	CVE-2022-50709	24 Dec 202510:55	–	debiancve
Tenable Nessus	EulerOS 2.0 SP13 : kernel (EulerOS-SA-2026-1244)	10 Mar 202600:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP13 : kernel (EulerOS-SA-2026-1280)	10 Mar 202600:00	–	nessus
Tenable Nessus	EulerOS Virtualization 2.13.1 : kernel (EulerOS-SA-2026-2132)	6 Jun 202600:00	–	nessus
Tenable Nessus	EulerOS Virtualization 2.13.0 : kernel (EulerOS-SA-2026-2171)	6 Jun 202600:00	–	nessus
Tenable Nessus	Photon OS 4.0: Linux PHSA-2021-4.0-0065	22 Jul 202100:00	–	nessus

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/net/wireless/ath/ath9k/htc_hst.c"
    ],
    "versions": [
      {
        "version": "fb9987d0f748c983bb795a86f47522313f701a08",
        "lessThan": "f3d2a3b7e290d0bdbddfcee5a6c3d922e2b7e02a",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "fb9987d0f748c983bb795a86f47522313f701a08",
        "lessThan": "84242f15f911f34aec9b22f99d1e9bff19723dbe",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "fb9987d0f748c983bb795a86f47522313f701a08",
        "lessThan": "2c485f4f2a64258acc5228e78ffb828c68d9e770",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "fb9987d0f748c983bb795a86f47522313f701a08",
        "lessThan": "9661724f6206bd606ecf13acada676a9975d230b",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "fb9987d0f748c983bb795a86f47522313f701a08",
        "lessThan": "b1b4144508adfc585e43856b31baaf9008a3beb4",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "fb9987d0f748c983bb795a86f47522313f701a08",
        "lessThan": "0d2649b288b7b9484e3d4380c0d6c4720a17e473",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "fb9987d0f748c983bb795a86f47522313f701a08",
        "lessThan": "4891a50f5ed8bfcb8f2a4b816b0676f398687783",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "fb9987d0f748c983bb795a86f47522313f701a08",
        "lessThan": "b383e8abed41cc6ff1a3b34de75df9397fa4878c",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/net/wireless/ath/ath9k/htc_hst.c"
    ],
    "versions": [
      {
        "version": "2.6.35",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "2.6.35",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "4.14.296",
        "lessThanOrEqual": "4.14.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "4.19.262",
        "lessThanOrEqual": "4.19.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.4.220",
        "lessThanOrEqual": "5.4.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.10.150",
        "lessThanOrEqual": "5.10.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.15.75",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.19.17",
        "lessThanOrEqual": "5.19.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.0.3",
        "lessThanOrEqual": "6.0.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.1",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/b1b4144508adfc585e43856b31baaf9008a3beb4
git	www.git.kernel.org/stable/c/2c485f4f2a64258acc5228e78ffb828c68d9e770
git	www.git.kernel.org/stable/c/4891a50f5ed8bfcb8f2a4b816b0676f398687783
git	www.git.kernel.org/stable/c/0d2649b288b7b9484e3d4380c0d6c4720a17e473
git	www.git.kernel.org/stable/c/f3d2a3b7e290d0bdbddfcee5a6c3d922e2b7e02a
git	www.git.kernel.org/stable/c/9661724f6206bd606ecf13acada676a9975d230b
git	www.git.kernel.org/stable/c/84242f15f911f34aec9b22f99d1e9bff19723dbe
git	www.git.kernel.org/stable/c/b383e8abed41cc6ff1a3b34de75df9397fa4878c

11 May 2026 19:23Current

EPSS0.00046