Answer in brief
CVE-2022-50871 records a High severity (CVSS 7.8) vulnerability in wifi: ath11k: Fix qmi_msg_handler data structure initialization. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
CVSS is 7.8. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=d5c65159f2895379e11ca13f62feabe93278985d <d5d71de448f36e34592f7c81b5e300d3e8dbb735 || >=d5c65159f2895379e11ca13f62feabe93278985d <a10e1530c424bb277b4edc7def0195857a548495 || >=d5c65159f2895379e11ca13f62feabe93278985d <ed3725e15a154ebebf44e0c34806c57525483f92 | d5d71de448f36e34592f7c81b5e300d3e8dbb735, a10e1530c424bb277b4edc7def0195857a548495, ed3725e15a154ebebf44e0c34806c57525483f92 |
| Linux/Linuxgeneric | 5.6 | Not reported |
Published upstream
Dec 30, 2025
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 4, 2026
In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: Fix qmi_msg_handler data structure initialization qmi_msg_handler is required to be null terminated by QMI module. There might be a case where a handler for a msg id is not present in the handlers array which can lead to infinite loop while searching the handler and therefore out of bound access in qmi_invoke_handler(). Hence update the initialization in qmi_msg_handler data structure. Tested-on: IPQ8074 hw2.0 AHB WLAN.HK.2.5.0.1-01100-QCAHKSWPL_SILICONZ-1
Quoted source text, attributed separately from HOL analysis.
Answer in brief
CVE-2022-50871 records a High severity (CVSS 7.8) vulnerability in wifi: ath11k: Fix qmi_msg_handler data structure initialization. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
CVSS is 7.8. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=d5c65159f2895379e11ca13f62feabe93278985d <d5d71de448f36e34592f7c81b5e300d3e8dbb735 || >=d5c65159f2895379e11ca13f62feabe93278985d <a10e1530c424bb277b4edc7def0195857a548495 || >=d5c65159f2895379e11ca13f62feabe93278985d <ed3725e15a154ebebf44e0c34806c57525483f92 | d5d71de448f36e34592f7c81b5e300d3e8dbb735, a10e1530c424bb277b4edc7def0195857a548495, ed3725e15a154ebebf44e0c34806c57525483f92 |
| Linux/Linuxgeneric | 5.6 | Not reported |
Published upstream
Dec 30, 2025
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 4, 2026
In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: Fix qmi_msg_handler data structure initialization qmi_msg_handler is required to be null terminated by QMI module. There might be a case where a handler for a msg id is not present in the handlers array which can lead to infinite loop while searching the handler and therefore out of bound access in qmi_invoke_handler(). Hence update the initialization in qmi_msg_handler data structure. Tested-on: IPQ8074 hw2.0 AHB WLAN.HK.2.5.0.1-01100-QCAHKSWPL_SILICONZ-1
Quoted source text, attributed separately from HOL analysis.