Vulnerability in Linux

CVE-2022-50358

In the Linux kernel, the following vulnerability has been resolved: brcmfmac: return error when getting invalid max_flowrings from dongle When firmware hit trap at initialization, host will read abnormal max_flowrings number from dongle, and it will cause kernel panic when doing iowrite to initialize dongle ring. To detect this error at early stage, we directly return error when getting invalid max_flowrings(>256).

EPSS: 0.003 (19.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.2 (Medium). Vector: CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

References

Frequently asked questions

What is CVE-2022-50358?
CVE-2022-50358 is a medium-severity vulnerability in Linux. CVSS score: 4.2/10. Published 2025-09-17.
How severe is CVE-2022-50358?
Medium severity. CVSS v3 base score is 4.2 out of 10.