CVE-2022-50187 is a race condition vulnerability in the ath11k Wi-Fi driver within the Linux kernel, specifically affecting the linux_kernel product. This flaw occurs when the ath11k_mac_op_start() function is called before the mon_reap_timer is properly set up, leading to a kernel BUG_ON() during a racing open() operation. The vulnerability has a CVSSv3.1 score of 4.7 (Medium), indicating a local attack vector with high attack complexity, requiring low privileges. Its potential impact is high availability loss (system crash), but it does not affect confidentiality or integrity. Currently, there is no evidence of active exploitation, nor are there any public exploit modules available on platforms like Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting low public attention.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 5.6, < 5.10.137CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
>= 5.11, < 5.15.61CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
>= 5.16, < 5.18.18CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
>= 5.19, < 5.19.2CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.4 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.