In the Linux kernel, the following vulnerability has been resolved: wifi: wil6210: debugfs: fix info leak in wil_write_file_wmi() The simple_write_to_buffer() function will succeed if even a single byte is initialized. However, we need to initialize the whole buffer to prevent information leaks. Just use memdup_user().

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Linux
  • Linux
  • Linux Kernel

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

No data.

References
Link Providers
https://git.kernel.org/stable/c/05ceda14ef7c73104e709c414c3680d8a59f51d4 cve-icon cve-icon
https://git.kernel.org/stable/c/074e865b37da55aa87baa16d68b96896f85f8adb cve-icon cve-icon
https://git.kernel.org/stable/c/4615458db7793fadc6d546ac3564b36819e77a22 cve-icon cve-icon
https://git.kernel.org/stable/c/60c9983425167ec5073c628d83a6875760d18059 cve-icon cve-icon
https://git.kernel.org/stable/c/67470920cd3f3cb38699b1ad23234f96bead4d21 cve-icon cve-icon
https://git.kernel.org/stable/c/789edc1af9c1a2293956e8534bfef3d18d629de9 cve-icon cve-icon
https://git.kernel.org/stable/c/7a4836560a6198d245d5732e26f94898b12eb760 cve-icon cve-icon
https://git.kernel.org/stable/c/c1216e699a1ce83ea005510844bd7508d34c6cef cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025061828-CVE-2022-50169-540a@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2022-50169 cve-icon
https://www.cve.org/CVERecord?id=CVE-2022-50169 cve-icon
History

Fri, 23 Jan 2026 16:45:00 +0000

Type Values Removed Values Added
Weaknesses CWE-909
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N'}

 cvssV3_1

{'score': 7.1, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H'}

Wed, 25 Jun 2025 02:45:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Important

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N'}

threat_severity

Moderate

Thu, 19 Jun 2025 15:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Important

Wed, 18 Jun 2025 11:15:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: wifi: wil6210: debugfs: fix info leak in wil_write_file_wmi() The simple_write_to_buffer() function will succeed if even a single byte is initialized. However, we need to initialize the whole buffer to prevent information leaks. Just use memdup_user().
Title wifi: wil6210: debugfs: fix info leak in wil_write_file_wmi()
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2025-06-18T11:03:22.397Z

Updated: 2025-06-18T11:03:22.397Z

Reserved: 2025-06-18T10:57:27.426Z

Link: CVE-2022-50169

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2025-06-18T11:15:47.227

Modified: 2026-01-23T16:42:54.373

Link: CVE-2022-50169

cve-icon Redhat

Severity : Moderate

Publid Date: 2025-06-18T00:00:00Z

Links: CVE-2022-50169 - Bugzilla