Riskcovery

CVE-2022-50165

wifi: wil6210: debugfs: fix uninitialized variable use in `wil_write_file_wmi()`

State
Published
Severity
Not scored
Published
Jun 18, 2025
Updated
May 11, 2026
Reserved
Jun 18, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: wil6210: debugfs: fix uninitialized variable use in `wil_write_file_wmi()`

Commit 7a4836560a61 changes simple_write_to_buffer() with memdup_user() but it forgets to change the value to be returned that came from simple_write_to_buffer() call. It results in the following warning:

warning: variable 'rc' is uninitialized when used here [-Wuninitialized] return rc; ^~

Remove rc variable and just return the passed in length if the memdup_user() succeeds.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • ff974e4083341383d3dd4079e52ed30f57f376f0 to before b13c84e877d7a3095bacb14665db304b2c00e95fAffected
  • ff974e4083341383d3dd4079e52ed30f57f376f0 to before c9fde3a44da566d8929070ab6bda4f0dfa9955d0Affected
  • ff974e4083341383d3dd4079e52ed30f57f376f0 to before 52b11a48cf073e0aab923ae809a765d756cecf13Affected
  • ff974e4083341383d3dd4079e52ed30f57f376f0 to before 6c5fee83bdbeffe8d607d1ab125122a75f40bd1aAffected
  • ff974e4083341383d3dd4079e52ed30f57f376f0 to before 689e5caf63e99e15d2f485ec297c1bf9243e0e28Affected
  • ff974e4083341383d3dd4079e52ed30f57f376f0 to before d4742c886043b69d2d058bfde3998ef333b66595Affected
  • ff974e4083341383d3dd4079e52ed30f57f376f0 to before 409bd72e544fdf4809ea0dac337bb5a1f11a25a9Affected
  • ff974e4083341383d3dd4079e52ed30f57f376f0 to before d578e0af3a003736f6c440188b156483d451b329Affected
LinuxLinux
  • 3.17Affected
  • before 3.17Not affected
  • 4.14.291 through 4.14.*Not affected
  • 4.19.256 through 4.19.*Not affected
  • 5.4.211 through 5.4.*Not affected
  • 5.10.137 through 5.10.*Not affected
  • 5.15.61 through 5.15.*Not affected
  • 5.18.18 through 5.18.*Not affected
  • 5.19.2 through 5.19.*Not affected
  • 6.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.