Riskcovery

CVE-2022-50871

wifi: ath11k: Fix qmi_msg_handler data structure initialization

State
Published
Severity
7.8 High
Published
Dec 30, 2025
Updated
Oct 15, 2026
Reserved
Dec 30, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: ath11k: Fix qmi_msg_handler data structure initialization

qmi_msg_handler is required to be null terminated by QMI module. There might be a case where a handler for a msg id is not present in the handlers array which can lead to infinite loop while searching the handler and therefore out of bound access in qmi_invoke_handler(). Hence update the initialization in qmi_msg_handler data structure.

Tested-on: IPQ8074 hw2.0 AHB WLAN.HK.2.5.0.1-01100-QCAHKSWPL_SILICONZ-1

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • d5c65159f2895379e11ca13f62feabe93278985d to before d5d71de448f36e34592f7c81b5e300d3e8dbb735Affected
  • d5c65159f2895379e11ca13f62feabe93278985d to before a10e1530c424bb277b4edc7def0195857a548495Affected
  • d5c65159f2895379e11ca13f62feabe93278985d to before ed3725e15a154ebebf44e0c34806c57525483f92Affected
LinuxLinux
  • 5.6Affected
  • before 5.6Not affected
  • 6.0.16 through 6.0.*Not affected
  • 6.1.2 through 6.1.*Not affected
  • 6.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.