CVE-2022-50678

A NULL pointer dereference vulnerability was found in the Broadcom brcmfmac wireless driver in the Linux kernel. When the SCAN debug log level is enabled, a loop variable 'i' is incorrectly modified when setting random MAC addresses. This causes an invalid memory access when attempting to print debug information using the corrupted index value, leading to a kernel crash.

This is a NULL pointer dereference in the brcmfmac wireless driver that can cause a kernel crash when SCAN debug logging is enabled. The vulnerability requires local access and typically only affects debugging scenarios.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the brcmfmac module from being loaded. See https://access.redhat.com/solutions/41278 for instructions on how to blacklist a kernel module.