PT-2025-49709 · Linux+3 · Linux Kernel+3

Published 2022-08-10 · Updated 2026-02-24 · CVE-2022-50678

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw within the brcmfmac module related to handling scan log levels. A change in the variable i during random MAC address setting can lead to invalid memory access when printing the value of pi->reqs[i]->reqid. This issue can result in a kernel panic, as indicated by the "Oops" message in the logs. The error occurs during the brcmf pno config sched scans function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

BDU:2026-04631

CVE-2022-50678

RHSA-2023:2458

RHSA-2023:2951

SUSE-SU-2026:0263-1

SUSE-SU-2026:0316-1

SUSE-SU-2026:0317-1

SUSE-SU-2026:0350-1

SUSE-SU-2026:0369-1

SUSE-SU-2026:0411-1

SUSE-SU-2026:0617-1

Affected Products

Centos

Linux Kernel

Red Hat

Brcmfmac

References · 1125

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50678.json · Exploit
• https://bdu.fstec.ru/vul/2026-04631 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50678 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-50678 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-50678 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50678 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-50678 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2026:0350-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0617-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0369-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-50678 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2026:0411-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0263-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0317-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-50678 · Vendor Advisory