In the Linux kernel, the following vulnerability has been resolved:
brcmfmac: return error when getting invalid max_flowrings from dongle
When firmware hit trap at initialization, host will read abnormal maxflowrings number from dongle, and it will cause kernel panic when doing iowrite to initialize dongle ring. To detect this error at early stage, we directly return error when getting invalid maxflowrings(>256).
[
{
"deprecated": false,
"id": "CVE-2022-50358-087333d4",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@10c4b63d09a5b0ebf1b61af1dae7f25555cf58b6",
"signature_version": "v1",
"target": {
"file": "drivers/net/wireless/broadcom/brcm80211/brcmfmac/pcie.c"
},
"signature_type": "Line",
"digest": {
"line_hashes": [
"306266720285178491958074710136842376264",
"96498809604756663078973330670546210676",
"81290043075771749145149773440171580239",
"320662757766787969904755895525570090261"
],
"threshold": 0.9
}
},
{
"deprecated": false,
"id": "CVE-2022-50358-1884da39",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2e8bb402b060a6c22160de3d72cee057698177c8",
"signature_version": "v1",
"target": {
"function": "brcmf_pcie_init_ringbuffers",
"file": "drivers/net/wireless/broadcom/brcm80211/brcmfmac/pcie.c"
},
"signature_type": "Function",
"digest": {
"function_hash": "336493296913572944157000908241992940498",
"length": 3693.0
}
},
{
"deprecated": false,
"id": "CVE-2022-50358-46f9e4a4",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@87f126b25fa8562196f0f4c0aa46a446026199bf",
"signature_version": "v1",
"target": {
"function": "brcmf_pcie_init_ringbuffers",
"file": "drivers/net/wireless/broadcom/brcm80211/brcmfmac/pcie.c"
},
"signature_type": "Function",
"digest": {
"function_hash": "336493296913572944157000908241992940498",
"length": 3693.0
}
},
{
"deprecated": false,
"id": "CVE-2022-50358-4fa2137c",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@200347eb3b2608cc8b54c13dd1d5e03809ba2eb2",
"signature_version": "v1",
"target": {
"function": "brcmf_pcie_init_ringbuffers",
"file": "drivers/net/wireless/broadcom/brcm80211/brcmfmac/pcie.c"
},
"signature_type": "Function",
"digest": {
"function_hash": "336493296913572944157000908241992940498",
"length": 3693.0
}
},
{
"deprecated": false,
"id": "CVE-2022-50358-6031f99c",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@87f126b25fa8562196f0f4c0aa46a446026199bf",
"signature_version": "v1",
"target": {
"file": "drivers/net/wireless/broadcom/brcm80211/brcmfmac/pcie.c"
},
"signature_type": "Line",
"digest": {
"line_hashes": [
"306266720285178491958074710136842376264",
"96498809604756663078973330670546210676",
"81290043075771749145149773440171580239",
"320662757766787969904755895525570090261"
],
"threshold": 0.9
}
},
{
"deprecated": false,
"id": "CVE-2022-50358-6ac8e6c3",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3cc9299036bdb647408e11e41de3eb1ff6d428cd",
"signature_version": "v1",
"target": {
"file": "drivers/net/wireless/broadcom/brcm80211/brcmfmac/pcie.c"
},
"signature_type": "Line",
"digest": {
"line_hashes": [
"306266720285178491958074710136842376264",
"96498809604756663078973330670546210676",
"81290043075771749145149773440171580239",
"320662757766787969904755895525570090261"
],
"threshold": 0.9
}
},
{
"deprecated": false,
"id": "CVE-2022-50358-cfeff79d",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2aca4f3734bd717e04943ddf340d49ab62299a00",
"signature_version": "v1",
"target": {
"file": "drivers/net/wireless/broadcom/brcm80211/brcmfmac/pcie.c"
},
"signature_type": "Line",
"digest": {
"line_hashes": [
"306266720285178491958074710136842376264",
"96498809604756663078973330670546210676",
"81290043075771749145149773440171580239",
"320662757766787969904755895525570090261"
],
"threshold": 0.9
}
},
{
"deprecated": false,
"id": "CVE-2022-50358-d3e5fa8c",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@200347eb3b2608cc8b54c13dd1d5e03809ba2eb2",
"signature_version": "v1",
"target": {
"file": "drivers/net/wireless/broadcom/brcm80211/brcmfmac/pcie.c"
},
"signature_type": "Line",
"digest": {
"line_hashes": [
"306266720285178491958074710136842376264",
"96498809604756663078973330670546210676",
"81290043075771749145149773440171580239",
"320662757766787969904755895525570090261"
],
"threshold": 0.9
}
},
{
"deprecated": false,
"id": "CVE-2022-50358-e4df344e",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2aca4f3734bd717e04943ddf340d49ab62299a00",
"signature_version": "v1",
"target": {
"function": "brcmf_pcie_init_ringbuffers",
"file": "drivers/net/wireless/broadcom/brcm80211/brcmfmac/pcie.c"
},
"signature_type": "Function",
"digest": {
"function_hash": "336493296913572944157000908241992940498",
"length": 3693.0
}
},
{
"deprecated": false,
"id": "CVE-2022-50358-e765b3cf",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2e8bb402b060a6c22160de3d72cee057698177c8",
"signature_version": "v1",
"target": {
"file": "drivers/net/wireless/broadcom/brcm80211/brcmfmac/pcie.c"
},
"signature_type": "Line",
"digest": {
"line_hashes": [
"306266720285178491958074710136842376264",
"96498809604756663078973330670546210676",
"81290043075771749145149773440171580239",
"320662757766787969904755895525570090261"
],
"threshold": 0.9
}
},
{
"deprecated": false,
"id": "CVE-2022-50358-e829a74d",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@10c4b63d09a5b0ebf1b61af1dae7f25555cf58b6",
"signature_version": "v1",
"target": {
"function": "brcmf_pcie_init_ringbuffers",
"file": "drivers/net/wireless/broadcom/brcm80211/brcmfmac/pcie.c"
},
"signature_type": "Function",
"digest": {
"function_hash": "336493296913572944157000908241992940498",
"length": 3693.0
}
},
{
"deprecated": false,
"id": "CVE-2022-50358-fb50f5a8",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3cc9299036bdb647408e11e41de3eb1ff6d428cd",
"signature_version": "v1",
"target": {
"function": "brcmf_pcie_init_ringbuffers",
"file": "drivers/net/wireless/broadcom/brcm80211/brcmfmac/pcie.c"
},
"signature_type": "Function",
"digest": {
"function_hash": "336493296913572944157000908241992940498",
"length": 3693.0
}
}
]