Security readout for executives and security teams
Plain-English summary
CVE-2022-50678 is a Linux kernel Wi-Fi driver bug in brcmfmac. Under specific scan logging and scheduled scan conditions, the driver can access an invalid address and crash the kernel. The main business risk is device instability or denial of service on systems using affected Broadcom Wi-Fi support.
Executive priority
Schedule remediation through normal kernel update cycles, with higher priority for fleets where Wi-Fi reliability is operationally important. There is no provided evidence of active exploitation, but affected devices may crash under the vulnerable condition.
Technical view
The flaw is in brcmfmac scheduled scan handling. When SCAN log level is enabled, a loop index modified during random MAC address setup is later used to print pi->reqs[i]->reqid, causing invalid address access. The kernel fix replaces that request index with the correct variable, ri.
Likely exposure
Exposure appears limited to Linux systems using the brcmfmac Broadcom Wi-Fi driver and affected kernel branches. Systems without this driver, without Broadcom Wi-Fi, or not using the vulnerable kernel code path are less likely exposed.
Exploitation context
The CVE record provides a kernel oops trace involving wificond and scheduled scan startup. The source bundle does not show public exploitation, and KEV status is false. Treat this as a stability and local denial-of-service concern unless vendor advisories state otherwise.
Researcher notes
Evidence is limited to the CVE record and Linux stable commit references. No CVSS, CWE, exploitability assessment, or distribution-specific advisory is included in the bundle. Avoid assuming remote exploitability; focus validation on driver presence, kernel lineage, and patch inclusion.
Mitigation direction
- Update to a vendor kernel containing the referenced brcmfmac stable fixes.
- Prioritize devices using Broadcom Wi-Fi and brcmfmac in production environments.
- If patching is delayed, check vendor guidance for safe operational mitigations.
Validation and detection
- Inventory Linux devices using the brcmfmac Wi-Fi driver.
- Compare running kernel builds against vendor advisories and referenced stable commits.
- Review kernel logs for brcmfmac oops traces during scheduled scans.
- Confirm patched systems include the brcmfmac index fix.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-2022-50678 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Unknown
- CVSS
- Not scored
- Known Exploited
- No
- Published
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS and timeline data
No CVSS vectors or timeline events were available in the normalized CVE source material.
Source materials
- CVE List V5 sourceCVE List V5
- https://git.kernel.org/stable/c/7ccb0529446ae68a8581916bfc95c353306d76baCVE reference
- https://git.kernel.org/stable/c/1c12d47a9017a7745585b57b9b0fdc0d8c50978eCVE reference
- https://git.kernel.org/stable/c/56a0ac48634155d2b866b99fba7e1dd8df4e2804CVE reference
- https://git.kernel.org/stable/c/50e45034c5802cedbf5b707364ea76ace29ad984CVE reference
- https://git.kernel.org/stable/c/75995ce1c926ee87bf93d58977c766b4e7744715CVE reference
- https://git.kernel.org/stable/c/4d4dcfa6b4e85a878401f4fbae4cafc88cdcceb4CVE reference
- https://git.kernel.org/stable/c/826405a911473b6ee8bd2aa891cb2f03a13efa17CVE reference
- https://git.kernel.org/stable/c/aa666b68e73fc06d83c070d96180b9010cf5a960CVE reference
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.