← CVE Intelligence

CVE-2022-50169

wifi: wil6210: debugfs: fix info leak in wil_write_file_wmi() PUBLISHED

Description (CNA)

In the Linux kernel, the following vulnerability has been resolved: wifi: wil6210: debugfs: fix info leak in wil_write_file_wmi() The simple_write_to_buffer() function will succeed if even a single byte is initialized. However, we need to initialize the whole buffer to prevent information leaks. Just use memdup_user().

Affected (CNA)

Vendor / productVersions
Linux / Linuxaffected ff974e4083341383d3dd4079e52ed30f57f376f0 before c1216e699a1ce83ea005510844bd7508d34c6cef; affected ff974e4083341383d3dd4079e52ed30f57f376f0 before 4615458db7793fadc6d546ac3564b36819e77a22; affected ff974e4083341383d3dd4079e52ed30f57f376f0 before 60c9983425167ec5073c628d83a6875760d18059; affected ff974e4083341383d3dd4079e52ed30f57f376f0 before 05ceda14ef7c73104e709c414c3680d8a59f51d4; affected ff974e4083341383d3dd4079e52ed30f57f376f0 before 074e865b37da55aa87baa16d68b96896f85f8adb; affected ff974e4083341383d3dd4079e52ed30f57f376f0 before 789edc1af9c1a2293956e8534bfef3d18d629de9; affected ff974e4083341383d3dd4079e52ed30f57f376f0 before 67470920cd3f3cb38699b1ad23234f96bead4d21; affected ff974e4083341383d3dd4079e52ed30f57f376f0 before 7a4836560a6198d245d5732e26f94898b12eb760
Linux / Linuxaffected 3.17; unaffected 0 before 3.17; unaffected 4.14.291 through 4.14.*; unaffected 4.19.256 through 4.19.*; unaffected 5.4.211 through 5.4.*; unaffected 5.10.137 through 5.10.*; unaffected 5.15.61 through 5.15.*; unaffected 5.18.18 through 5.18.*; unaffected 5.19.2 through 5.19.*; unaffected 6.0 through *

CWE

No CWE identifiers supplied.

References