Upstream information

CVE-2022-50533 at MITRE

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: mac80211: mlme: fix null-ptr deref on failed assoc

If association to an AP without a link 0 fails, then we crash in
tracing because it assumes that either ap_mld_addr or link 0 BSS
is valid, since we clear sdata->vif.valid_links and then don't
add the ap_mld_addr to the struct.

Since we clear also sdata->vif.cfg.ap_addr, keep a local copy of
it and assign it earlier, before clearing valid_links, to fix
this.

SUSE information

Overall state of this security issue: New

This issue is currently rated as having not set severity.

SUSE Bugzilla entry: 1251735 [NEW]

No SUSE Security Announcements cross referenced.

SUSE Timeline for this CVE

CVE page created: Tue Oct 7 20:00:17 2025
CVE page last modified: Wed Oct 8 18:06:08 2025