In the Linux kernel, the following vulnerability has been resolved: brcmfmac: return error when getting invalid max_flowrings from dongle When firmware hit trap at initialization, host will read abnormal max_flowrings number from dongle, and it will cause kernel panic when doing iowrite to initialize dongle ring. To detect this error at early stage, we directly return error when getting invalid max_flowrings(>256).

Metrics

No CVSS v4.0

Attack Vector Physical

Attack Complexity High

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

No data.

References
Link Providers
https://git.kernel.org/stable/c/10c4b63d09a5b0ebf1b61af1dae7f25555cf58b6 cve-icon cve-icon
https://git.kernel.org/stable/c/200347eb3b2608cc8b54c13dd1d5e03809ba2eb2 cve-icon cve-icon
https://git.kernel.org/stable/c/2aca4f3734bd717e04943ddf340d49ab62299a00 cve-icon cve-icon
https://git.kernel.org/stable/c/2e8bb402b060a6c22160de3d72cee057698177c8 cve-icon cve-icon
https://git.kernel.org/stable/c/3cc9299036bdb647408e11e41de3eb1ff6d428cd cve-icon cve-icon
https://git.kernel.org/stable/c/87f126b25fa8562196f0f4c0aa46a446026199bf cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025091714-CVE-2022-50358-6a86@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2022-50358 cve-icon
https://www.cve.org/CVERecord?id=CVE-2022-50358 cve-icon
History

Wed, 14 Jan 2026 19:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 10 Dec 2025 17:15:00 +0000

Type Values Removed Values Added
Weaknesses NVD-CWE-noinfo
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Metrics cvssV3_1

{'score': 7.0, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'}

 cvssV3_1

{'score': 4.2, 'vector': 'CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'}

Thu, 18 Sep 2025 12:45:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Vendors & Products Linux
Linux linux Kernel

Thu, 18 Sep 2025 00:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 7.0, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'}

threat_severity

Important

Wed, 17 Sep 2025 15:00:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: brcmfmac: return error when getting invalid max_flowrings from dongle When firmware hit trap at initialization, host will read abnormal max_flowrings number from dongle, and it will cause kernel panic when doing iowrite to initialize dongle ring. To detect this error at early stage, we directly return error when getting invalid max_flowrings(>256).
Title brcmfmac: return error when getting invalid max_flowrings from dongle
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2025-09-17T14:56:10.688Z

Updated: 2026-01-14T18:33:01.929Z

Reserved: 2025-09-17T14:53:06.994Z

Link: CVE-2022-50358

cve-icon Vulnrichment

Updated: 2026-01-14T18:32:36.311Z

cve-icon NVD

Status : Modified

Published: 2025-09-17T15:15:34.510

Modified: 2026-01-14T19:16:07.827

Link: CVE-2022-50358

cve-icon Redhat

Severity : Important

Publid Date: 2025-09-17T00:00:00Z

Links: CVE-2022-50358 - Bugzilla