CVE-2022-50829

A flaw was found in the ath9k USB Wi-Fi driver in the Linux kernel. In certain conditions within the ath9k_hif_usb_reg_in_cb() path, a socket buffer (skb) may be freed prematurely and then freed again on an error path, leading to a use-after-free condition. Additionally, failure to allocate a new skb can result in the URB context becoming NULL, with the associated buffer not being released, causing a memory leak.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.