Riskcovery

CVE-2022-50533

wifi: mac80211: mlme: fix null-ptr deref on failed assoc

State
Published
Severity
Not scored
Published
Oct 7, 2025
Updated
May 11, 2026
Reserved
Oct 7, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: mac80211: mlme: fix null-ptr deref on failed assoc

If association to an AP without a link 0 fails, then we crash in tracing because it assumes that either ap_mld_addr or link 0 BSS is valid, since we clear sdata->vif.valid_links and then don't add the ap_mld_addr to the struct.

Since we clear also sdata->vif.cfg.ap_addr, keep a local copy of it and assign it earlier, before clearing valid_links, to fix this.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 81151ce462e533551f3284bfdb8e0f461c9220e6 to before c695dfba8dfb82dc7ace4f22be088916cbf621caAffected
  • 81151ce462e533551f3284bfdb8e0f461c9220e6 to before bb7743955a929e44b308cc3f63f8cc03873c1beeAffected
  • 81151ce462e533551f3284bfdb8e0f461c9220e6 to before 78a6a43aaf87180ec7425a2a90468e1b4d09a1ecAffected
LinuxLinux
  • 6.0Affected
  • before 6.0Not affected
  • 6.0.16 through 6.0.*Not affected
  • 6.1.2 through 6.1.*Not affected
  • 6.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.