PT-2025-38171 · Linux · Linux

Published 2025-09-17 · Updated 2025-09-17 · CVE-2022-50361

NVD

In the Linux kernel, the following vulnerability has been resolved:

wifi: wilc1000: add missing unregister netdev() in wilc netdev ifc init()

Fault injection test reports this issue:

kernel BUG at net/core/dev.c:10731!

invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI

Call Trace:

<TASK>

wilc netdev ifc init+0x19f/0x220 [wilc1000 884bf126e9e98af6a708f266a8dffd53f99e4bf5]

wilc cfg80211 init+0x30c/0x380 [wilc1000 884bf126e9e98af6a708f266a8dffd53f99e4bf5]

wilc bus probe+0xad/0x2b0 [wilc1000 spi 1520a7539b6589cc6cde2ae826a523a33f8bacff]

spi probe+0xe4/0x140

really probe+0x17e/0x3f0

driver probe device+0xe3/0x170

driver probe device+0x49/0x120

The root case here is alloc ordered workqueue() fails, but

cfg80211 unregister netdevice() or unregister netdev() not be called in

error handling path. To fix add unregister netdev goto lable to add the

unregister operation in error handling path.

Related Identifiers

CVE-2022-50361

Affected Products

Linux

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2022-50361 · Security Note
• https://git.kernel.org/stable/c/a1bdecedc7ad0512365267cd1a26bfc2ae455c59 · Note
• https://git.kernel.org/stable/c/6da6ce086221803ed6c3b1db11096cecd3e58ec8 · Note
• https://git.kernel.org/stable/c/2b88974ecb358990e1c33fabcd0b9e142bab7f21 · Note