CVE-2022-50297
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-09-15

Last updated on: 2025-12-04

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: verify the expected usb_endpoints are present The bug arises when a USB device claims to be an ATH9K but doesn't have the expected endpoints. (In this case there was an interrupt endpoint where the driver expected a bulk endpoint.) The kernel needs to be able to handle such devices without getting an internal error. usb 1-1: BOGUS urb xfer, pipe 3 != type 1 WARNING: CPU: 3 PID: 500 at drivers/usb/core/urb.c:493 usb_submit_urb+0xce2/0x1430 drivers/usb/core/urb.c:493 Modules linked in: CPU: 3 PID: 500 Comm: kworker/3:2 Not tainted 5.10.135-syzkaller #0 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Workqueue: events request_firmware_work_func RIP: 0010:usb_submit_urb+0xce2/0x1430 drivers/usb/core/urb.c:493 Call Trace: ath9k_hif_usb_alloc_rx_urbs drivers/net/wireless/ath/ath9k/hif_usb.c:908 [inline] ath9k_hif_usb_alloc_urbs+0x75e/0x1010 drivers/net/wireless/ath/ath9k/hif_usb.c:1019 ath9k_hif_usb_dev_init drivers/net/wireless/ath/ath9k/hif_usb.c:1109 [inline] ath9k_hif_usb_firmware_cb+0x142/0x530 drivers/net/wireless/ath/ath9k/hif_usb.c:1242 request_firmware_work_func+0x12e/0x240 drivers/base/firmware_loader/main.c:1097 process_one_work+0x9af/0x1600 kernel/workqueue.c:2279 worker_thread+0x61d/0x12f0 kernel/workqueue.c:2425 kthread+0x3b4/0x4a0 kernel/kthread.c:313 ret_from_fork+0x22/0x30 arch/x86/entry/entry_64.S:299 Found by Linux Verification Center (linuxtesting.org) with Syzkaller.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-09-15
Last Modified
2025-12-04
Generated
2026-06-16
AI Q&A
2025-09-15
EPSS Evaluated
2026-06-15
NVD
CVE-2022-50297
Affected Vendors & Products
Showing 8 associated CPEs
Vendor Product Version / Range
linux linux_kernel From 2.6.35 (inc) to 4.9.337 (exc)
linux linux_kernel From 4.10 (inc) to 4.14.303 (exc)
linux linux_kernel From 4.15 (inc) to 4.19.270 (exc)
linux linux_kernel From 4.20 (inc) to 5.4.229 (exc)
linux linux_kernel From 5.5 (inc) to 5.10.163 (exc)
linux linux_kernel From 5.11 (inc) to 5.15.86 (exc)
linux linux_kernel From 5.16 (inc) to 6.0.16 (exc)
linux linux_kernel From 6.1 (inc) to 6.1.2 (exc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-NVD-CWE-noinfo
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability occurs in the Linux kernel's ath9k wireless driver when a USB device incorrectly claims to be an ATH9K device but does not have the expected USB endpoints. Specifically, the driver expects a bulk endpoint but finds an interrupt endpoint instead. This mismatch causes the kernel to encounter an internal error when handling such devices.

Impact Analysis

The impact of this vulnerability is that the Linux kernel may experience internal errors or instability when a USB device misrepresents itself as an ATH9K device with incorrect endpoints. This could lead to system crashes or malfunctioning of the wireless driver when such devices are connected.

Detection Guidance

This vulnerability can be detected by monitoring system logs for error messages related to USB devices claiming to be ATH9K but having incorrect endpoints. Specifically, look for kernel log entries containing messages like 'usb 1-1: BOGUS urb xfer, pipe 3 != type 1' or warnings from usb_submit_urb in the kernel logs. You can use commands such as 'dmesg | grep usb' or 'journalctl -k | grep usb' to search for these messages.

Mitigation Strategies

Immediate mitigation involves updating the Linux kernel to a version where this vulnerability is resolved, as the issue arises from improper handling of USB endpoints in the ath9k driver. Until an update is applied, avoid connecting USB devices that claim to be ATH9K but may have incorrect endpoint configurations to prevent kernel errors.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2022-50297. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart