CVE-2022-50678: wifi: brcmfmac: fix invalid address access when enabling SCAN log level

Q: What is the severity of CVE-2022-50678?

CVE-2022-50678 has been classified as a medium severity vulnerability.

Q: How do I fix CVE-2022-50678?

To fix CVE-2022-50678, users should update to the latest stable version of the Linux kernel that includes the patch for this vulnerability.

Q: What systems are affected by CVE-2022-50678?

CVE-2022-50678 affects systems running the Linux kernel with the brcmfmac driver.

Q: What kind of vulnerability is CVE-2022-50678?

CVE-2022-50678 is a vulnerability related to invalid address access during the enabling of SCAN log level in the brcmfmac Wi-Fi driver.

Q: When was CVE-2022-50678 disclosed?

CVE-2022-50678 was disclosed as part of a series of fixes for the Linux kernel, with patches released in early 2023.

Published Dec 9, 2025

Updated

In the Linux kernel, the following vulnerability has been resolved:

wifi: brcmfmac: fix invalid address access when enabling SCAN log level

The variable i is changed when setting random MAC address and causes invalid address access when printing the value of pi->reqs[i]->reqid.

We replace reqs index with ri to fix the issue.

[ 136.726473] Unable to handle kernel access to user memory outside uaccess routines at virtual address 0000000000000000 [ 136.737365] Mem abort info: [ 136.740172] ESR = 0x96000004 [ 136.743359] Exception class = DABT (current EL), IL = 32 bits [ 136.749294] SET = 0, FnV = 0 [ 136.752481] EA = 0, S1PTW = 0 [ 136.755635] Data abort info: [ 136.758514] ISV = 0, ISS = 0x00000004 [ 136.762487] CM = 0, WnR = 0 [ 136.765522] user pgtable: 4k pages, 48-bit VAs, pgdp = 000000005c4e2577 [ 136.772265] [0000000000000000] pgd=0000000000000000 [ 136.777160] Internal error: Oops: 96000004 [#1] PREEMPT SMP [ 136.782732] Modules linked in: brcmfmac(O) brcmutil(O) cfg80211(O) compat(O) [ 136.789788] Process wificond (pid: 3175, stack limit = 0x00000000053048fb) [ 136.796664] CPU: 3 PID: 3175 Comm: wificond Tainted: G O 4.19.42-00001-g531a5f5 #1 [ 136.805532] Hardware name: Freescale i.MX8MQ EVK (DT) [ 136.810584] pstate: 60400005 (nZCv daif +PAN -UAO) [ 136.815429] pc : brcmfpnoconfigschedscans+0x6cc/0xa80 [brcmfmac] [ 136.821811] lr : brcmfpnoconfigschedscans+0x67c/0xa80 [brcmfmac] [ 136.828162] sp : ffff00000e9a3880 [ 136.831475] x29: ffff00000e9a3890 x28: ffff800020543400 [ 136.836786] x27: ffff8000b1008880 x26: ffff0000012bf6a0 [ 136.842098] x25: ffff80002054345c x24: ffff800088d22400 [ 136.847409] x23: ffff0000012bf638 x22: ffff0000012bf6d8 [ 136.852721] x21: ffff8000aced8fc0 x20: ffff8000ac164400 [ 136.858032] x19: ffff00000e9a3946 x18: 0000000000000000 [ 136.863343] x17: 0000000000000000 x16: 0000000000000000 [ 136.868655] x15: ffff0000093f3b37 x14: 0000000000000050 [ 136.873966] x13: 0000000000003135 x12: 0000000000000000 [ 136.879277] x11: 0000000000000000 x10: ffff000009a61888 [ 136.884589] x9 : 000000000000000f x8 : 0000000000000008 [ 136.889900] x7 : 303a32303d726464 x6 : ffff00000a1f957d [ 136.895211] x5 : 0000000000000000 x4 : ffff00000e9a3942 [ 136.900523] x3 : 0000000000000000 x2 : ffff0000012cead8 [ 136.905834] x1 : ffff0000012bf6d8 x0 : 0000000000000000 [ 136.911146] Call trace: [ 136.913623] brcmfpnoconfigschedscans+0x6cc/0xa80 [brcmfmac] [ 136.919658] brcmfpnostartschedscan+0xa4/0x118 [brcmfmac] [ 136.925430] brcmfcfg80211schedscanstart+0x80/0xe0 [brcmfmac] [ 136.931636] nl80211startschedscan+0x140/0x308 [cfg80211] [ 136.937298] genlrcvmsg+0x358/0x3f4 [ 136.940960] netlinkrcvskb+0xb4/0x118 [ 136.944795] genlrcv+0x34/0x48 [ 136.947935] netlinkunicast+0x264/0x300 [ 136.951856] netlinksendmsg+0x2e4/0x33c [ 136.955781] syssendto+0x120/0x19c

Affected Software

170 affected componentsFixes available

linux/kernel=4.19.42

debian/linux<6.0.3-1

6.0.3-1

debian/linux<6.0.3-1

6.0.3-1

debian/linux<6.0.3-1

6.0.3-1

ubuntu/linux-azure<4.15.0-1162.177~14.04.1

4.15.0-1162.177~14.04.1

ubuntu/linux-aws-hwe<4.15.0-1151.164~16.04.1

4.15.0-1151.164~16.04.1

ubuntu/linux-azure<4.15.0-1162.177~16.04.1

4.15.0-1162.177~16.04.1

ubuntu/linux-gcp<4.15.0-1146.162~16.04.1

4.15.0-1146.162~16.04.1

ubuntu/linux-hwe<4.15.0-206.217~16.04.1

4.15.0-206.217~16.04.1

ubuntu/linux-oracle<4.15.0-1115.126~16.04.1

4.15.0-1115.126~16.04.1

ubuntu/linux-hwe-edge*

ubuntu/linux<4.15.0-204.215

4.15.0-204.215

ubuntu/linux-aws<4.15.0-1150.163

4.15.0-1150.163

ubuntu/linux-aws-5.4<5.4.0-1096.104~18.04.1

5.4.0-1096.104~18.04.1

ubuntu/linux-azure-4.15<4.15.0-1161.176

4.15.0-1161.176

ubuntu/linux-azure-5.4<5.4.0-1103.109~18.04.1

5.4.0-1103.109~18.04.1

ubuntu/linux-gcp-4.15<4.15.0-1145.161

4.15.0-1145.161

ubuntu/linux-gcp-5.4<5.4.0-1100.109~18.04.1

5.4.0-1100.109~18.04.1

ubuntu/linux-hwe-5.4<5.4.0-139.156~18.04.1

5.4.0-139.156~18.04.1

ubuntu/linux-ibm-5.4<5.4.0-1044.49~18.04.1

5.4.0-1044.49~18.04.1

ubuntu/linux-kvm<4.15.0-1135.140

4.15.0-1135.140

ubuntu/linux-oracle<4.15.0-1114.125

4.15.0-1114.125

ubuntu/linux-oracle-5.4<5.4.0-1093.102~18.04.1

5.4.0-1093.102~18.04.1

ubuntu/linux-raspi-5.4<5.4.0-1080.91~18.04.1

5.4.0-1080.91~18.04.1

ubuntu/linux-aws-5.0*

ubuntu/linux-aws-5.3*

ubuntu/linux-azure*

ubuntu/linux-azure-5.3*

ubuntu/linux-azure-edge*

ubuntu/linux-gcp*

ubuntu/linux-gcp-5.3*

ubuntu/linux-gke-4.15*

ubuntu/linux-gke-5.4*

ubuntu/linux-gkeop-5.4*

ubuntu/linux-hwe*

ubuntu/linux-hwe-edge*

ubuntu/linux-oem*

ubuntu/linux-oracle-5.0*

ubuntu/linux-oracle-5.3*

ubuntu/linux-aws-fips<4.15.0-2089.95

4.15.0-2089.95

ubuntu/linux-azure-fips<4.15.0-2070.76

4.15.0-2070.76

ubuntu/linux-fips<4.15.0-1107.118

4.15.0-1107.118

ubuntu/linux-gcp-fips<4.15.0-2054.59

4.15.0-2054.59

ubuntu/linux-aws-fips*

ubuntu/linux-azure-fips*

ubuntu/linux-fips*

ubuntu/linux-gcp-fips*

ubuntu/linux<5.4.0-139.156

5.4.0-139.156

ubuntu/linux-aws<5.4.0-1096.104

5.4.0-1096.104

ubuntu/linux-aws-5.15<5.15.0-1030.34~20.04.1

5.15.0-1030.34~20.04.1

ubuntu/linux-azure<5.4.0-1103.109

5.4.0-1103.109

ubuntu/linux-azure-5.15<5.15.0-1033.40~20.04.1

5.15.0-1033.40~20.04.1

ubuntu/linux-bluefield<5.4.0-1058.64

5.4.0-1058.64

ubuntu/linux-gcp<5.4.0-1100.109

5.4.0-1100.109

ubuntu/linux-gcp-5.15<5.15.0-1029.36~20.04.1

5.15.0-1029.36~20.04.1

ubuntu/linux-hwe-5.15<5.15.0-60.66~20.04.1

5.15.0-60.66~20.04.1

ubuntu/linux-ibm<5.4.0-1044.49

5.4.0-1044.49

ubuntu/linux-intel-iotg-5.15<5.15.0-1025.30~20.04.1

5.15.0-1025.30~20.04.1

ubuntu/linux-iot<5.4.0-1012.14

5.4.0-1012.14

ubuntu/linux-kvm<5.4.0-1086.92

5.4.0-1086.92

ubuntu/linux-lowlatency-hwe-5.15<5.15.0-60.66~20.04.1

5.15.0-60.66~20.04.1

ubuntu/linux-oracle<5.4.0-1093.102

5.4.0-1093.102

ubuntu/linux-oracle-5.15<5.15.0-1029.35~20.04.1

5.15.0-1029.35~20.04.1

ubuntu/linux-raspi<5.4.0-1080.91

5.4.0-1080.91

ubuntu/linux-riscv-5.15<5.15.0-1029.33~20.04.1

5.15.0-1029.33~20.04.1

ubuntu/linux-xilinx-zynqmp<5.4.0-1021.25

5.4.0-1021.25

ubuntu/linux-aws-5.11*

ubuntu/linux-aws-5.13*

ubuntu/linux-aws-5.8*

ubuntu/linux-azure-5.11*

ubuntu/linux-azure-5.13*

ubuntu/linux-azure-5.8*

ubuntu/linux-azure-fde*

ubuntu/linux-gcp-5.11*

ubuntu/linux-gcp-5.13*

ubuntu/linux-gcp-5.8*

ubuntu/linux-gke*

ubuntu/linux-gke-5.15*

ubuntu/linux-gkeop*

ubuntu/linux-gkeop-5.15*

ubuntu/linux-hwe-5.11*

ubuntu/linux-hwe-5.13*

ubuntu/linux-hwe-5.8*

ubuntu/linux-intel-5.13*

ubuntu/linux-oem-5.10*

ubuntu/linux-oem-5.13*

ubuntu/linux-oem-5.6*

ubuntu/linux-oracle-5.11*

ubuntu/linux-oracle-5.13*

ubuntu/linux-oracle-5.8*

ubuntu/linux-raspi2*

ubuntu/linux-riscv*

ubuntu/linux-riscv-5.11*

ubuntu/linux-riscv-5.8*

ubuntu/linux-aws-fips<5.4.0-1096.104+fips1

5.4.0-1096.104+fips1

ubuntu/linux-azure-fips<5.4.0-1103.109+fips1

5.4.0-1103.109+fips1

ubuntu/linux-fips<5.4.0-1072.81

5.4.0-1072.81

ubuntu/linux-gcp-fips<5.4.0-1100.109+fips1

5.4.0-1100.109+fips1

ubuntu/linux-aws-fips*

ubuntu/linux-azure-fips*

ubuntu/linux-fips*

ubuntu/linux-gcp-fips*

ubuntu/linux<5.15.0-60.66

5.15.0-60.66

ubuntu/linux-allwinner-5.19*

ubuntu/linux-aws<5.15.0-1030.34

5.15.0-1030.34

ubuntu/linux-aws-5.19*

ubuntu/linux-aws-6.2*

ubuntu/linux-aws-6.5*

ubuntu/linux-azure<5.15.0-1033.40

5.15.0-1033.40

ubuntu/linux-azure-5.19*

ubuntu/linux-azure-6.2*

ubuntu/linux-azure-6.5*

ubuntu/linux-azure-fde<5.15.0-1033.40.1

5.15.0-1033.40.1

ubuntu/linux-azure-fde-5.19*

ubuntu/linux-azure-fde-6.2*

ubuntu/linux-gcp<5.15.0-1029.36

5.15.0-1029.36

ubuntu/linux-gcp-5.19*

ubuntu/linux-gcp-6.2*

ubuntu/linux-gcp-6.5*

ubuntu/linux-gke<5.15.0-1027.32

5.15.0-1027.32

ubuntu/linux-gkeop<5.15.0-1015.19

5.15.0-1015.19

ubuntu/linux-hwe-5.19*

ubuntu/linux-hwe-6.2*

ubuntu/linux-hwe-6.5*

ubuntu/linux-ibm<5.15.0-1025.28

5.15.0-1025.28

ubuntu/linux-intel-iot-realtime*

ubuntu/linux-intel-iotg<5.15.0-1025.30

5.15.0-1025.30

ubuntu/linux-kvm<5.15.0-1028.33

5.15.0-1028.33

ubuntu/linux-lowlatency<5.15.0-60.66

5.15.0-60.66

ubuntu/linux-lowlatency-hwe-5.19*

ubuntu/linux-lowlatency-hwe-6.2*

ubuntu/linux-lowlatency-hwe-6.5*

ubuntu/linux-nvidia<5.15.0-1017.17

5.15.0-1017.17

ubuntu/linux-nvidia-6.2*

ubuntu/linux-nvidia-6.5*

ubuntu/linux-oem-5.17*

ubuntu/linux-oem-6.0*

ubuntu/linux-oem-6.1*

ubuntu/linux-oem-6.5*

ubuntu/linux-oracle<5.15.0-1029.35

5.15.0-1029.35

ubuntu/linux-oracle-6.5*

ubuntu/linux-raspi<5.15.0-1024.26

5.15.0-1024.26

ubuntu/linux-realtime*

ubuntu/linux-riscv*

ubuntu/linux-riscv-5.19*

ubuntu/linux-riscv-6.5*

ubuntu/linux-starfive-5.19*

ubuntu/linux-starfive-6.2*

ubuntu/linux-starfive-6.5*

ubuntu/linux-bluefield<5.15.0-1014.16

5.15.0-1014.16

ubuntu/linux-azure-6.11*

ubuntu/linux-gcp-6.11*

ubuntu/linux-hwe-6.11*

ubuntu/linux-lowlatency-hwe-6.11*

ubuntu/linux-nvidia-6.11*

ubuntu/linux-oem-6.11*

ubuntu/linux-oem-6.8*

ubuntu/linux-raspi-realtime*

ubuntu/linux-realtime*

ubuntu/linux-riscv*

ubuntu/linux-riscv-6.14*

ubuntu/linux-vmware*

linux/kernel>=4.13.0<4.14.296

4.14.296

linux/kernel>=4.15.0<4.19.262

4.19.262

linux/kernel>=4.20.0<5.4.220

5.4.220

linux/kernel>=5.5.0<5.10.150

5.10.150

linux/kernel>=5.11.0<5.15.75

5.15.75

linux/kernel>=5.16.0<5.19.17

5.19.17

linux/kernel>=5.20.0<6.0.3

6.0.3

debian/linux

6.1.176-16.1.190-16.12.107-16.12.116-17.2.15-17.3.4-1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 6.0.3-1
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 4.15.0-1162.177~14.04.1
Upgrade
Upgrade ubuntu/linux-aws-hwe to a version that resolves this vulnerability.
Fixed in 4.15.0-1151.164~16.04.1
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 4.15.0-1162.177~16.04.1
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 4.15.0-1146.162~16.04.1
Upgrade
Upgrade ubuntu/linux-hwe to a version that resolves this vulnerability.
Fixed in 4.15.0-206.217~16.04.1
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 4.15.0-1115.126~16.04.1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 4.15.0-204.215
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 4.15.0-1150.163
Upgrade
Upgrade ubuntu/linux-aws-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1096.104~18.04.1
Upgrade
Upgrade ubuntu/linux-azure-4.15 to a version that resolves this vulnerability.
Fixed in 4.15.0-1161.176
Upgrade
Upgrade ubuntu/linux-azure-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1103.109~18.04.1
Upgrade
Upgrade ubuntu/linux-gcp-4.15 to a version that resolves this vulnerability.
Fixed in 4.15.0-1145.161
Upgrade
Upgrade ubuntu/linux-gcp-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1100.109~18.04.1
Upgrade
Upgrade ubuntu/linux-hwe-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-139.156~18.04.1
Upgrade
Upgrade ubuntu/linux-ibm-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1044.49~18.04.1
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 4.15.0-1135.140
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 4.15.0-1114.125
Upgrade
Upgrade ubuntu/linux-oracle-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1093.102~18.04.1
Upgrade
Upgrade ubuntu/linux-raspi-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1080.91~18.04.1
Upgrade
Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.
Fixed in 4.15.0-2089.95
Upgrade
Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.
Fixed in 4.15.0-2070.76
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 4.15.0-1107.118
Upgrade
Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.
Fixed in 4.15.0-2054.59
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 5.4.0-139.156
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 5.4.0-1096.104
Upgrade
Upgrade ubuntu/linux-aws-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1030.34~20.04.1
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 5.4.0-1103.109
Upgrade
Upgrade ubuntu/linux-azure-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1033.40~20.04.1
Upgrade
Upgrade ubuntu/linux-bluefield to a version that resolves this vulnerability.
Fixed in 5.4.0-1058.64
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 5.4.0-1100.109
Upgrade
Upgrade ubuntu/linux-gcp-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1029.36~20.04.1
Upgrade
Upgrade ubuntu/linux-hwe-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-60.66~20.04.1
Upgrade
Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.
Fixed in 5.4.0-1044.49
Upgrade
Upgrade ubuntu/linux-intel-iotg-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1025.30~20.04.1
Upgrade
Upgrade ubuntu/linux-iot to a version that resolves this vulnerability.
Fixed in 5.4.0-1012.14
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 5.4.0-1086.92
Upgrade
Upgrade ubuntu/linux-lowlatency-hwe-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-60.66~20.04.1
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 5.4.0-1093.102
Upgrade
Upgrade ubuntu/linux-oracle-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1029.35~20.04.1
Upgrade
Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.
Fixed in 5.4.0-1080.91
Upgrade
Upgrade ubuntu/linux-riscv-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1029.33~20.04.1
Upgrade
Upgrade ubuntu/linux-xilinx-zynqmp to a version that resolves this vulnerability.
Fixed in 5.4.0-1021.25
Upgrade
Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1096.104+fips1
Upgrade
Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1103.109+fips1
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1072.81
Upgrade
Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1100.109+fips1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 5.15.0-60.66
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 5.15.0-1030.34
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 5.15.0-1033.40
Upgrade
Upgrade ubuntu/linux-azure-fde to a version that resolves this vulnerability.
Fixed in 5.15.0-1033.40.1
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 5.15.0-1029.36
Upgrade
Upgrade ubuntu/linux-gke to a version that resolves this vulnerability.
Fixed in 5.15.0-1027.32
Upgrade
Upgrade ubuntu/linux-gkeop to a version that resolves this vulnerability.
Fixed in 5.15.0-1015.19
Upgrade
Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.
Fixed in 5.15.0-1025.28
Upgrade
Upgrade ubuntu/linux-intel-iotg to a version that resolves this vulnerability.
Fixed in 5.15.0-1025.30
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 5.15.0-1028.33
Upgrade
Upgrade ubuntu/linux-lowlatency to a version that resolves this vulnerability.
Fixed in 5.15.0-60.66
Upgrade
Upgrade ubuntu/linux-nvidia to a version that resolves this vulnerability.
Fixed in 5.15.0-1017.17
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 5.15.0-1029.35
Upgrade
Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.
Fixed in 5.15.0-1024.26
Upgrade
Upgrade ubuntu/linux-bluefield to a version that resolves this vulnerability.
Fixed in 5.15.0-1014.16
Upgrade
Upgrade linux/Kernel to a version that resolves this vulnerability.
Fixed in 4.14.296
Upgrade
Upgrade linux/Kernel to a version that resolves this vulnerability.
Fixed in 4.19.262
Upgrade
Upgrade linux/Kernel to a version that resolves this vulnerability.
Fixed in 5.4.220
Upgrade
Upgrade linux/Kernel to a version that resolves this vulnerability.
Fixed in 5.10.150
Upgrade
Upgrade linux/Kernel to a version that resolves this vulnerability.
Fixed in 5.15.75
Upgrade
Upgrade linux/Kernel to a version that resolves this vulnerability.
Fixed in 5.19.17
Upgrade
Upgrade linux/Kernel to a version that resolves this vulnerability.
Fixed in 6.0.3
Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.116-1Fixed in 7.2.15-1Fixed in 7.3.4-1

Event History

Dec 9, 2025

CVE Published

via MITRE·01:29 AM

Data Sourced

via MITRE·01:29 AM

Description

Data Sourced

via OSV·01:29 AM

DescriptionAffected Software

Data Sourced

via NVD·04:17 PM

Description

Nov 11, 2026

Data Sourced

via OSV·09:37 AM

Severity

Frequently Asked Questions

What is the severity of CVE-2022-50678?

CVE-2022-50678 has been classified as a medium severity vulnerability.

How do I fix CVE-2022-50678?

To fix CVE-2022-50678, users should update to the latest stable version of the Linux kernel that includes the patch for this vulnerability.

What systems are affected by CVE-2022-50678?

CVE-2022-50678 affects systems running the Linux kernel with the brcmfmac driver.

What kind of vulnerability is CVE-2022-50678?

CVE-2022-50678 is a vulnerability related to invalid address access during the enabling of SCAN log level in the brcmfmac Wi-Fi driver.

When was CVE-2022-50678 disclosed?

CVE-2022-50678 was disclosed as part of a series of fixes for the Linux kernel, with patches released in early 2023.

CVE-2022-50678: wifi: brcmfmac: fix invalid address access when enabling SCAN log level

Affected Software

Remediation

Event History

Frequently Asked Questions

What is the severity of CVE-2022-50678?

How do I fix CVE-2022-50678?

What systems are affected by CVE-2022-50678?

What kind of vulnerability is CVE-2022-50678?

When was CVE-2022-50678 disclosed?

Company

Resources

Contact