Vulnerability in Linux
CVE-2022-50358
In the Linux kernel, the following vulnerability has been resolved: brcmfmac: return error when getting invalid max_flowrings from dongle When firmware hit trap at initialization, host will read abnormal max_flowrings number from dongle, and it will cause kernel panic when doing iowrite to initialize dongle ring. To detect this error at early stage, we directly return error when getting invalid max_flowrings(>256).
EPSS: 0.003 (19.7th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 4.2 (Medium). Vector: CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H.
Affected products
- Linux — versions 9e37f045d5e7f33450515f237c2f6f6bfee137dd, 3.17, 0
- Linux Linux_kernel
References
Frequently asked questions
- What is CVE-2022-50358?
- CVE-2022-50358 is a medium-severity vulnerability in Linux. CVSS score: 4.2/10. Published 2025-09-17.
- How severe is CVE-2022-50358?
- Medium severity. CVSS v3 base score is 4.2 out of 10.