CVE-2022-50716

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.0.0-09039-ga6afa4199d3d-dirty #18

Description The Linux kernel contained a use-after-free flaw within the ar5523 Wi-Fi driver. Specifically, the issue occurred in the ar5523 cmd() function when a timeout occurred. The ar5523 probe() function frees the device structure, and subsequently, the ar5523 cmd tx cb() function could access this freed memory, leading to a potential system crash. The issue was identified through syzkaller testing. The vulnerability is triggered when ar5523 cmd() times out after being called by ar5523 host available() within ar5523 probe().

Recommendations Update to version 6.0.0-09039-ga6afa4199d3d-dirty #18 or a later version to address this issue.