CVE-2022-50508

HIGH

Linux Kernel < 6.2.3 - Out-of-Bounds Read

Title source: rule

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt76x0: fix oob access in mt76x0_phy_get_target_power After 'commit ba45841ca5eb ("wifi: mt76: mt76x02: simplify struct mt76x02_rate_power")', mt76x02 relies on ht[0-7] rate_power data for vht mcs{0,7}, while it uses vth[0-1] rate_power for vht mcs {8,9}. Fix a possible out-of-bound access in mt76x0_phy_get_target_power routine.

Scores

CVSS v3 7.1
EPSS 0.0002
EPSS Percentile 3.2%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Classification

CWE
CWE-125
Status draft

Affected Products (2)

linux/linux_kernel < 6.2.3
linux/Kernel < 6.2.3linux

Timeline

Published Oct 04, 2025
Tracked Since Feb 18, 2026