CVE-2022-50165

wifi: wil6210: debugfs: fix uninitialized variable use in `wil_write_file_wmi()`

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: wil6210: debugfs: fix uninitialized variable use in `wil_write_file_wmi()` Commit 7a4836560a61 changes simple_write_to_buffer() with memdup_user() but it forgets to change the value to be returned that came from simple_write_to_buffer() call. It results in the following warning: warning: variable 'rc' is uninitialized when used here [-Wuninitialized] return rc; ^~ Remove rc variable and just return the passed in length if the memdup_user() succeeds.

N/A

CVSS

Severity:

EPSS 0.02%

Affected: Linux Linux

References

Link	Tags
https://git.kernel.org/stable/c/b13c84e877d7a3095bacb14665db304b2c00e95f
https://git.kernel.org/stable/c/c9fde3a44da566d8929070ab6bda4f0dfa9955d0
https://git.kernel.org/stable/c/52b11a48cf073e0aab923ae809a765d756cecf13
https://git.kernel.org/stable/c/6c5fee83bdbeffe8d607d1ab125122a75f40bd1a
https://git.kernel.org/stable/c/689e5caf63e99e15d2f485ec297c1bf9243e0e28
https://git.kernel.org/stable/c/d4742c886043b69d2d058bfde3998ef333b66595
https://git.kernel.org/stable/c/409bd72e544fdf4809ea0dac337bb5a1f11a25a9
https://git.kernel.org/stable/c/d578e0af3a003736f6c440188b156483d451b329

Frequently Asked Questions

What is the severity of CVE-2022-50165?: CVE-2022-50165 has not yet been assigned a CVSS score.
How to fix CVE-2022-50165?: To fix CVE-2022-50165, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2022-50165 being actively exploited in the wild?: As for now, there are no information to confirm that CVE-2022-50165 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2022-50165?: CVE-2022-50165 affects Linux Linux, Linux Linux.

This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.