CVE-2022-50508CWE-125

CVE-2022-50508

High · published October 4, 2025

CVSS v3.1
7.1
EPSS
0%
Percentile
7.2
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

wifi: mt76: mt76x0: fix oob access in mt76x0_phy_get_target_power

After 'commit ba45841ca5eb ("wifi: mt76: mt76x02: simplify struct

mt76x02_rate_power")', mt76x02 relies on ht[0-7] rate_power data for

vht mcs{0,7}, while it uses vth[0-1] rate_power for vht mcs {8,9}.

Fix a possible out-of-bound access in mt76x0_phy_get_target_power routine.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00180 · 7.2th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2025-10-04T20:15Z
Affected products (1)
ProductVersionsFixed in
linux/linux_kernel≥ 6.2, < 6.2.36.2.3
References (2)
EPSS history
Timeline
  • 04 OCT 15:43Z
    wifi: mt76: mt76x0: fix oob access in mt76x0_phy_get_target_power
    cvelistv5