CVE-2022-50508

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-50508

7.1 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.2

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

I

n the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt76x0: fix oob access in mt76x0_phy_get_target_power After 'commit ba45841ca5eb ("wifi: mt76: mt76x02: simplify struct mt76x02_rate_power")', mt76x02 relies on ht[0-7] rate_power data for vht mcs{0,7}, while it uses vth[0-1] rate_power for vht mcs {8,9}. Fix a possible out-of-bound access in mt76x0_phy_get_target_power routine.

References
Link Resource
https://git.kernel.org/stable/c/6e1abc51c945663bddebfa1beb9590ff5b250eb7 Patch
https://git.kernel.org/stable/c/bf425c5d7ef6fb4083c1e0d46440f886127b5ee5 Patch
Configurations

Configuration 1 (hide)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

05 Feb 2026, 15:43

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.1
References () https://git.kernel.org/stable/c/6e1abc51c945663bddebfa1beb9590ff5b250eb7 - () https://git.kernel.org/stable/c/6e1abc51c945663bddebfa1beb9590ff5b250eb7 - Patch
References () https://git.kernel.org/stable/c/bf425c5d7ef6fb4083c1e0d46440f886127b5ee5 - () https://git.kernel.org/stable/c/bf425c5d7ef6fb4083c1e0d46440f886127b5ee5 - Patch
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CWE CWE-125
First Time Linux linux Kernel
Linux

04 Oct 2025, 16:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-10-04 16:15

Updated : 2026-02-05 15:43

NVD link : CVE-2022-50508

Mitre link : CVE-2022-50508

CVE.ORG link : CVE-2022-50508

JSON object : View

Products Affected

linux

CWE
CWE-125

Out-of-bounds Read