VYPR
Medium severity5.5NVD Advisory· Published Oct 7, 2025· Updated Jun 17, 2026

CVE-2022-50533

CVE-2022-50533

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: mac80211: mlme: fix null-ptr deref on failed assoc

If association to an AP without a link 0 fails, then we crash in tracing because it assumes that either ap_mld_addr or link 0 BSS is valid, since we clear sdata->vif.valid_links and then don't add the ap_mld_addr to the struct.

Since we clear also sdata->vif.cfg.ap_addr, keep a local copy of it and assign it earlier, before clearing valid_links, to fix this.

Affected products

4
  • osv-coords
    Range: >= 6.0.0, < 6.0.16
  • Linux/Kernelllm-fuzzy3 versions
    (expand)+ 2 more
    • (no CPE)
    • (no CPE)range: 6.0
    • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: >=6.0,<6.0.16

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.