CVE-2022-50297

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw within the ath9k module related to USB endpoint handling. The issue occurs when a USB device identifies as an ATH9K but lacks the expected endpoints, specifically when an interrupt endpoint is present where a bulk endpoint is expected. This can lead to kernel errors when handling such devices. The vulnerability was found by Linux Verification Center (linuxtesting.org) using Syzkaller.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.