Security readout for executives and security teams
Plain-English summary
CVE-2022-50716 is a Linux kernel flaw in the ar5523 USB Wi-Fi driver. If a command times out during device setup, the driver can later access memory that was already freed. The business risk is mainly to Linux systems using this specific driver or hardware path, not all Linux deployments equally.
Executive priority
Handle through normal kernel patch management, with higher priority for Linux endpoints or appliances using USB Wi-Fi. There is no sourced evidence of active exploitation, but kernel memory safety bugs can affect system stability and should not be ignored.
Technical view
The issue is a use-after-free in ar5523_cmd_tx_cb() after ar5523_cmd() times out during probe paths such as ar5523_host_available(). ar5523_probe() can free the device structure while an in-flight TX command callback may still reference it. The kernel fix cancels the in-flight TX command when the submitted URB times out.
Likely exposure
Exposure appears limited to Linux systems with the ar5523 wireless driver present and reachable through relevant USB Wi-Fi device initialization paths. The source lists Linux kernel affected ranges and stable fix commits, but distribution-specific package status must be verified separately.
Exploitation context
The public source describes a syzkaller-discovered kernel memory safety bug with a KASAN use-after-free trace. The bundle does not show CISA KEV listing, active exploitation, public exploit availability, or a CVSS score.
Researcher notes
The affected-version data in the bundle is not sufficient to make distribution-specific conclusions. Treat upstream stable commits as remediation anchors, then validate downstream backports. The root condition is asynchronous callback access after timeout-driven cleanup in the ar5523 command path.
Mitigation direction
- Update to a vendor kernel containing the referenced upstream stable fixes.
- Check Linux distribution advisories for CVE-2022-50716 package status.
- Prioritize systems using ar5523-supported USB Wi-Fi hardware or loading the driver.
- If updates are unavailable, follow vendor guidance for temporary risk reduction.
Validation and detection
- Inventory Linux kernel versions across managed systems.
- Check whether the ar5523 driver is built, packaged, or loaded.
- Map deployed kernels to vendor advisories or referenced stable commits.
- Review kernel logs for ar5523-related probe or timeout failures.
- Confirm patched kernels include the timeout cancellation fix.
Public sources used
- CVE Program
- CVE List V5
- Linux stable commit c9ba3fbf6a488da6cad1d304c5234bd8d729eba3
- Linux stable commit 340524ae7b53a72cf5d9e7bd7790433422b3b12f
- Linux stable commit 6447beefd21326a3f4719ec2ea511df797f6c820
- Linux stable commit 7360b323e0343ea099091d4ae09576dbe1f09516
- Linux stable commit 8af52492717e3538eba3f81d012b1476af8a89a6
- Linux stable commit 3eca9697c2f3905dea3ad2fc536ebaa1fbd735bd
- Linux stable commit 601ae89375033ac4870c086e24ba03f235d38e55
- Linux stable commit 9aef34e1ae35a87e5f6a22278c17823b7ce64c88
- Linux stable commit b6702a942a069c2a975478d719e98d83cdae1797
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-2022-50716 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Unknown
- CVSS
- Not scored
- Known Exploited
- No
- Published
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS and timeline data
No CVSS vectors or timeline events were available in the normalized CVE source material.
Source materials
- CVE List V5 sourceCVE List V5
- https://git.kernel.org/stable/c/c9ba3fbf6a488da6cad1d304c5234bd8d729eba3CVE reference
- https://git.kernel.org/stable/c/340524ae7b53a72cf5d9e7bd7790433422b3b12fCVE reference
- https://git.kernel.org/stable/c/6447beefd21326a3f4719ec2ea511df797f6c820CVE reference
- https://git.kernel.org/stable/c/7360b323e0343ea099091d4ae09576dbe1f09516CVE reference
- https://git.kernel.org/stable/c/8af52492717e3538eba3f81d012b1476af8a89a6CVE reference
- https://git.kernel.org/stable/c/3eca9697c2f3905dea3ad2fc536ebaa1fbd735bdCVE reference
- https://git.kernel.org/stable/c/601ae89375033ac4870c086e24ba03f235d38e55CVE reference
- https://git.kernel.org/stable/c/9aef34e1ae35a87e5f6a22278c17823b7ce64c88CVE reference
- https://git.kernel.org/stable/c/b6702a942a069c2a975478d719e98d83cdae1797CVE reference
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.