CVE-2022-50186

MEDIUM

MEDIUM Priority: 0.01 BB Relevance: 36/100

Published: 2025-06-18 Modified: 2026-11-05 First seen: 2026-11-05 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local

AC: Low

PR: Low

UI: None

S: Unchanged

C: None

I: None

A: High

Description

In the Linux kernel, the following vulnerability has been resolved: ath11k: fix missing skb drop on htc_tx_completion error On htc_tx_completion error the skb is not dropped. This is wrong since the completion_handler logic expect the skb to be consumed anyway even when an error is triggered. Not freeing the skb on error is a memory leak since the skb won't be freed anywere else. Correctly free the packet on eid >= ATH11K_HTC_EP_COUNT before returning. Tested-on: IPQ8074 hw2.0 AHB WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1

Weakness Classification (1)

CWE-401

Affected Software (5)

Vendor	Product	Version
Linux	Linux	f951380a6022440335f668f85296096ba13071ba < dda25326839d6e6b1fe59e79616149e44ea4eaa4
Linux	Linux	f951380a6022440335f668f85296096ba13071ba < 1f1483361585ae7556492f50f83f038bbdf8c294
Linux	Linux	f951380a6022440335f668f85296096ba13071ba < e5646fe3b7ef739c392e59da7db6adf5e1fdef42
Linux	Linux	5.17
linux	linux_kernel	5.17 – 5.18.18