CVE-2022-50358 Details
Description
In the Linux kernel, the following vulnerability has been resolved: brcmfmac: return error when getting invalid max_flowrings from dongle When firmware hit trap at initialization, host will read abnormal max_flowrings number from dongle, and it will cause kernel panic when doing iowrite to initialize dongle ring. To detect this error at early stage, we directly return error when getting invalid max_flowrings(>256).
A vulnerability in the Linux kernel's handling of Broadcom brcmfmac wireless drivers can lead to a kernel panic. This issue arises when the firmware encounters a trap during initialization, causing the host to read an abnormal number of max_flowrings from the dongle. If this number exceeds 256, it triggers a kernel panic while attempting to initialize the dongle ring via an I/O write operation. The vulnerability is present in several versions of the Linux kernel.
Users can upgrade to the latest version of the Linux kernel where this vulnerability has been addressed. Instructions for upgrading the Linux kernel can be found in the official Linux documentation or through the package management system of the respective Linux distribution.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jan 14, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/10c4b63d09a5b0ebf1b61af1dae7f25555cf58b6 | kernel.org | Patch |
| https://git.kernel.org/stable/c/200347eb3b2608cc8b54c13dd1d5e03809ba2eb2 | kernel.org | Patch |
| https://git.kernel.org/stable/c/2aca4f3734bd717e04943ddf340d49ab62299a00 | kernel.org | Patch |
| https://git.kernel.org/stable/c/2e8bb402b060a6c22160de3d72cee057698177c8 | kernel.org | Patch |
| https://git.kernel.org/stable/c/3cc9299036bdb647408e11e41de3eb1ff6d428cd | kernel.org | Patch |
| https://git.kernel.org/stable/c/87f126b25fa8562196f0f4c0aa46a446026199bf | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-noinfo | Insufficient Information to Classify Weakness | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | < 5.4.229 >= 5.5, < 5.10.163 >= 5.11, < 5.15.86 >= 5.16, < 6.0.16 >= 6.1, < 6.1.2 |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Jan 14, 2026 | CVE Modified | CISA-ADP |
| Dec 10, 2025 | Initial Analysis | [email protected] |
| Sep 17, 2025 | New CVE Received | kernel.org |