CVE-2022-50169 wifi: wil6210: debugfs: fix info leak in wil_write_file_wmi()
An attacker with debugfs access can read uninitialized kernel memory via the wil6210 Wi-Fi driver, potentially exposing sensitive data.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2022-50169?
CVE-2022-50169 is a high-severity vulnerability in Linux kernel, published on 18 Jun 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
wifi: wil6210: debugfs: fix info leak in wil_write_file_wmi()
The simple_write_to_buffer() function will succeed if even a single byte is initialized. However, we need to initialize the whole buffer to prevent information leaks. Just use memdup_user().
Weakness: CWE-909
Which versions are affected by CVE-2022-50169?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2022-50169?
Apply the vendor's patch.
Is CVE-2022-50169 being exploited?
There is no known exploitation of CVE-2022-50169 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as DEBIAN-CVE-2022-50169, GHSA-3g5v-28p4-h3v9, UBUNTU-CVE-2022-50169.