CVE-2022-50533
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
07/10/2025
Last modified:
08/10/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
wifi: mac80211: mlme: fix null-ptr deref on failed assoc<br />
<br />
If association to an AP without a link 0 fails, then we crash in<br />
tracing because it assumes that either ap_mld_addr or link 0 BSS<br />
is valid, since we clear sdata->vif.valid_links and then don&#39;t<br />
add the ap_mld_addr to the struct.<br />
<br />
Since we clear also sdata->vif.cfg.ap_addr, keep a local copy of<br />
it and assign it earlier, before clearing valid_links, to fix<br />
this.



