Riskcovery

CVE-2022-50732

staging: rtl8192u: Fix use after free in ieee80211_rx()

State
Published
Severity
8.8 High
Published
Dec 24, 2025
Updated
Aug 5, 2026
Reserved
Dec 24, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

staging: rtl8192u: Fix use after free in ieee80211_rx()

We cannot dereference the "skb" pointer after calling ieee80211_monitor_rx(), because it is a use after free.

Scores

CVSSScoreVectorSource
3.18.8 HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 8fc8598e61f6f384f3eaf1d9b09500c12af47b37 to before 9c03db0ec84b7964a11b20706665c99a5fead332Affected
  • 8fc8598e61f6f384f3eaf1d9b09500c12af47b37 to before fdc62d31d50e4ce5d8f363fcb8299ba0e00ee6fdAffected
  • 8fc8598e61f6f384f3eaf1d9b09500c12af47b37 to before a0df8d44b555ae09729d6533fd4532977563c7b9Affected
  • 8fc8598e61f6f384f3eaf1d9b09500c12af47b37 to before 288ada16a93aab5aa2ebea8190aafdb35b716854Affected
  • 8fc8598e61f6f384f3eaf1d9b09500c12af47b37 to before daa8045a991363ccdae5615d170f35aa1135e7a7Affected
  • 8fc8598e61f6f384f3eaf1d9b09500c12af47b37 to before b0aaec894a909c88117c8bda6c7c9b26cf7c744bAffected
  • 8fc8598e61f6f384f3eaf1d9b09500c12af47b37 to before de174163c0d319ff06d622e79130a0017c8f5a6eAffected
  • 8fc8598e61f6f384f3eaf1d9b09500c12af47b37 to before 73df1172bbcc8d45cd28e3b1a9ca2edb2f9f7ce6Affected
  • 8fc8598e61f6f384f3eaf1d9b09500c12af47b37 to before bcc5e2dcf09089b337b76fc1a589f6ff95ca19acAffected
LinuxLinux
  • 2.6.33Affected
  • before 2.6.33Not affected
  • 4.9.337 through 4.9.*Not affected
  • 4.14.303 through 4.14.*Not affected
  • 4.19.270 through 4.19.*Not affected
  • 5.4.229 through 5.4.*Not affected
  • 5.10.163 through 5.10.*Not affected
  • 5.15.86 through 5.15.*Not affected
  • 6.0.16 through 6.0.*Not affected
  • 6.1.2 through 6.1.*Not affected
  • 6.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.