PT-2025-38435 · Linux+5 · Linux Kernel+5

Published 2022-09-10 · Updated 2026-05-26 · CVE-2022-50418

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:L/AC:H/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw within the ath11k module’s Mobile Host Interface (MHI) functionality. Specifically, a memory leak can occur in the ath11k mhi register() function. This happens when ath11k mhi read addr from dt() fails, preventing the proper freeing of memory allocated for the mhi ctrl controller via mhi free controller().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Missing Release of Resource after Effective Lifetime

Memory Leak

Weakness Enumeration

CWE-772

CWE-401

Related Identifiers

AZL-72316

BDU:2026-05985

CESA-2023_2951

CVE-2022-50418

RHSA-2023:2458

RHSA-2023:2951

RHSA-2023_2458

RHSA-2023_2951

SUSE-SU-2025:03615-1

SUSE-SU-2025:3761-1

Affected Products

Centos

Debian

Linux Kernel

Red Hat

Suse

Ath11K

References · 839

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50418.json · Exploit
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2022-50418 · Vendor Advisory
• https://git.kernel.org/stable/c/43e7c3505ec70db3d3c6458824d5fa40f62e3e7b · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50418 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50418 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:03615-1 · Vendor Advisory
• https://git.kernel.org/stable/c/015ced9eb63b8b19cb725a1d592d150b60494ced · Patch
• https://git.kernel.org/stable/c/72ef896e80b6ec7cdc1dd42577045f8e7c9c32b3 · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-50418 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2022-50418 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-50418 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-50418 · Security Note
• https://osv.dev/vulnerability/CVE-2022-50418 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-50418 · Security Note
• https://bdu.fstec.ru/vul/2026-05985 · Security Note