Shift-Out-of-Bounds Vulnerability in Linux Kernel's Broadcom Wifi Driver

CVE-2022-50551

What is CVE-2022-50551?

A shift-out-of-bounds vulnerability exists in the Broadcom wireless driver (brcmfmac) within the Linux kernel. It occurs when a provided 'chiprev' value exceeds the bounds set by the driver, potentially leading to unexpected behavior or crashes. A patch has been implemented to add a validation check that ensures if the 'chiprev' is equal to or greater than the allowed limit, the function returns NULL. This safeguard prevents bitwise operations from being performed with out-of-bounds values, which could compromise system stability.

References