CVE-2022-50361: wifi: wilc1000: add missing unregister_netdev() in wilc_netdev_ifc_init()
In the Linux kernel, the following vulnerability has been resolved:
wifi: wilc1000: add missing unregisternetdev() in wilcnetdevifcinit()
Fault injection test reports this issue:
kernel BUG at net/core/dev.c:10731! invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI Call Trace: <TASK> wilcnetdevifcinit+0x19f/0x220 [wilc1000 884bf126e9e98af6a708f266a8dffd53f99e4bf5] wilccfg80211init+0x30c/0x380 [wilc1000 884bf126e9e98af6a708f266a8dffd53f99e4bf5] wilcbusprobe+0xad/0x2b0 [wilc1000spi 1520a7539b6589cc6cde2ae826a523a33f8bacff] spiprobe+0xe4/0x140 reallyprobe+0x17e/0x3f0 driverprobedevice+0xe3/0x170 driverprobedevice+0x49/0x120
The root case here is allocorderedworkqueue() fails, but cfg80211unregisternetdevice() or unregisternetdev() not be called in error handling path. To fix add unregisternetdev goto lable to add the unregister operation in error handling path.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-50361?
CVE-2022-50361 has a severity rating that indicates a potential system crash due to a missing unregister_netdev() in the Linux kernel's wilc1000 module.
How do I fix CVE-2022-50361?
To fix CVE-2022-50361, you should update to the latest version of the Linux kernel where this vulnerability has been addressed.
Which software is affected by CVE-2022-50361?
CVE-2022-50361 affects the Linux Kernel and specifically the wilc1000 wireless driver.
What is the impact of CVE-2022-50361?
The impact of CVE-2022-50361 can result in a kernel crash during network operations, leading to potential downtime.
Is CVE-2022-50361 a remote exploit?
CVE-2022-50361 is not specifically a remote exploit but involves issues that can trigger a crash locally when using the affected driver.