PT-2025-41056 · Linux+2 · Linux Kernel+2

Published 2022-11-04 · Updated 2026-05-26 · CVE-2022-50551

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.14.0 #132

Description The Linux kernel contained a flaw within the brcmfmac component, specifically in the brcmf fw alloc request() function. This issue involved a potential shift-out-of-bounds error when handling 'chiprev' values provided by the device. The vulnerability occurred when the 'chiprev' value was excessively large, exceeding the bounds of a u32 variable during a bitwise AND operation. This condition could lead to a system crash. The issue was discovered through a modified version of syzkaller.

Recommendations Update to a version newer than 5.14.0 #132.

Exploit

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

CWE-682

Related Identifiers

BDU:2026-01290

CVE-2022-50551

OESA-2025-2659

SUSE-SU-2025:4111-1

SUSE-SU-2025:4139-1

SUSE-SU-2025:4149-1

SUSE-SU-2025:4320-1

SUSE-SU-2025:4515-1

Affected Products

Linux Kernel

Suse

Brcmfmac

References · 543

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50551.json · Exploit
• https://git.kernel.org/stable/c/0b12d2aa264bac35bff9b5399bb162262b2b8949 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-53344 · Security Note
• https://git.kernel.org/stable/c/bc45aa1911bf699b9905f12414e3c1879d6b784f · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-53733 · Security Note
• https://git.kernel.org/stable/c/4c8fc44c44b97854623c56363c359f711fc0b887 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-40044 · Security Note
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2404-CVE-2022-50551 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-53641 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-53199 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-50349 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-50531 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-50520 · Security Note
• https://git.kernel.org/stable/c/1db036d13e10809943c2dce553e2fa7fc9c6cd80 · Patch
• https://git.kernel.org/stable/c/87792567d9ed93fd336d2c3b8d7870f44e141e6d · Patch