CVE-2022-50169

wifi: wil6210: debugfs: fix info leak in wil_write_file_wmi()

State: Published
Severity: Not scored
Published: Jun 18, 2025
Updated: May 11, 2026
Reserved: Jun 18, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: wil6210: debugfs: fix info leak in wil_write_file_wmi()

The simple_write_to_buffer() function will succeed if even a single byte is initialized. However, we need to initialize the whole buffer to prevent information leaks. Just use memdup_user().

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	ff974e4083341383d3dd4079e52ed30f57f376f0 to before c1216e699a1ce83ea005510844bd7508d34c6cefAffected ff974e4083341383d3dd4079e52ed30f57f376f0 to before 4615458db7793fadc6d546ac3564b36819e77a22Affected ff974e4083341383d3dd4079e52ed30f57f376f0 to before 60c9983425167ec5073c628d83a6875760d18059Affected ff974e4083341383d3dd4079e52ed30f57f376f0 to before 05ceda14ef7c73104e709c414c3680d8a59f51d4Affected ff974e4083341383d3dd4079e52ed30f57f376f0 to before 074e865b37da55aa87baa16d68b96896f85f8adbAffected ff974e4083341383d3dd4079e52ed30f57f376f0 to before 789edc1af9c1a2293956e8534bfef3d18d629de9Affected ff974e4083341383d3dd4079e52ed30f57f376f0 to before 67470920cd3f3cb38699b1ad23234f96bead4d21Affected ff974e4083341383d3dd4079e52ed30f57f376f0 to before 7a4836560a6198d245d5732e26f94898b12eb760Affected
LinuxLinux	3.17Affected before 3.17Not affected 4.14.291 through 4.14.Not affected 4.19.256 through 4.19.Not affected 5.4.211 through 5.4.Not affected 5.10.137 through 5.10.Not affected 5.15.61 through 5.15.Not affected 5.18.18 through 5.18.Not affected 5.19.2 through 5.19.*Not affected 6.0 and laterNot affected

Product

Versions

LinuxLinux

ff974e4083341383d3dd4079e52ed30f57f376f0 to before c1216e699a1ce83ea005510844bd7508d34c6cefAffected
ff974e4083341383d3dd4079e52ed30f57f376f0 to before 4615458db7793fadc6d546ac3564b36819e77a22Affected
ff974e4083341383d3dd4079e52ed30f57f376f0 to before 60c9983425167ec5073c628d83a6875760d18059Affected
ff974e4083341383d3dd4079e52ed30f57f376f0 to before 05ceda14ef7c73104e709c414c3680d8a59f51d4Affected
ff974e4083341383d3dd4079e52ed30f57f376f0 to before 074e865b37da55aa87baa16d68b96896f85f8adbAffected
ff974e4083341383d3dd4079e52ed30f57f376f0 to before 789edc1af9c1a2293956e8534bfef3d18d629de9Affected
ff974e4083341383d3dd4079e52ed30f57f376f0 to before 67470920cd3f3cb38699b1ad23234f96bead4d21Affected
ff974e4083341383d3dd4079e52ed30f57f376f0 to before 7a4836560a6198d245d5732e26f94898b12eb760Affected

LinuxLinux

3.17Affected
before 3.17Not affected
4.14.291 through 4.14.*Not affected
4.19.256 through 4.19.*Not affected
5.4.211 through 5.4.*Not affected
5.10.137 through 5.10.*Not affected
5.15.61 through 5.15.*Not affected
5.18.18 through 5.18.*Not affected
5.19.2 through 5.19.*Not affected
6.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.