ghsa-3g5v-28p4-h3v9
Vulnerability from github
Published
2025-06-18 12:30
Modified
2025-06-18 12:30
VLAI Severity ?
Details
In the Linux kernel, the following vulnerability has been resolved:
wifi: wil6210: debugfs: fix info leak in wil_write_file_wmi()
The simple_write_to_buffer() function will succeed if even a single byte is initialized. However, we need to initialize the whole buffer to prevent information leaks. Just use memdup_user().
{ "affected": [], "aliases": [ "CVE-2022-50169" ], "database_specific": { "cwe_ids": [], "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2025-06-18T11:15:47Z", "severity": null }, "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: wil6210: debugfs: fix info leak in wil_write_file_wmi()\n\nThe simple_write_to_buffer() function will succeed if even a single\nbyte is initialized. However, we need to initialize the whole buffer\nto prevent information leaks. Just use memdup_user().", "id": "GHSA-3g5v-28p4-h3v9", "modified": "2025-06-18T12:30:52Z", "published": "2025-06-18T12:30:52Z", "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-50169" }, { "type": "WEB", "url": "https://git.kernel.org/stable/c/05ceda14ef7c73104e709c414c3680d8a59f51d4" }, { "type": "WEB", "url": "https://git.kernel.org/stable/c/074e865b37da55aa87baa16d68b96896f85f8adb" }, { "type": "WEB", "url": "https://git.kernel.org/stable/c/4615458db7793fadc6d546ac3564b36819e77a22" }, { "type": "WEB", "url": "https://git.kernel.org/stable/c/60c9983425167ec5073c628d83a6875760d18059" }, { "type": "WEB", "url": "https://git.kernel.org/stable/c/67470920cd3f3cb38699b1ad23234f96bead4d21" }, { "type": "WEB", "url": "https://git.kernel.org/stable/c/789edc1af9c1a2293956e8534bfef3d18d629de9" }, { "type": "WEB", "url": "https://git.kernel.org/stable/c/7a4836560a6198d245d5732e26f94898b12eb760" }, { "type": "WEB", "url": "https://git.kernel.org/stable/c/c1216e699a1ce83ea005510844bd7508d34c6cef" } ], "schema_version": "1.4.0", "severity": [] }
Loading…
Loading…
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…