CVE-2022-50714: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-50714 is a kernel crash vulnerability in the Linux kernel's mt76 Wi-Fi driver, specifically affecting the mt7921e PCI module. The flaw causes a crash during insmod/rmmod stress testing due to a missing mt76_dev reference in mt7921_pci_remove(), where driver data (drvdata) is not properly initialized before probe() completes. It was published on December 24, 2025, and affects Linux kernel versions incorporating the mt7921e driver. The CVSS score has not been publicly assigned a severity rating at this time, and the CVE status is listed as Unknown (CVE.org, Feedly).

The root cause is a race condition or improper initialization sequence in the mt7921e PCI driver's remove path (CWE-908: Use of Uninitialized Resource). Specifically, mt7921_pci_remove() attempts to call cancel_work_sync() which internally invokes try_to_grab_pending(), but the mt76_dev structure has not been set as drvdata before probe() finishes, resulting in a write to an invalid user-space address (0x0000000000006df0). The KASAN (Kernel Address Sanitizer) report identifies this as a user-memory-access bug triggered during the rmmod operation on kernel 5.19.0-rc6. The fix ensures that drvdata is properly set before probe() completes, preventing the null/invalid pointer dereference during module removal (CVE.org).

Exploitation of this vulnerability results in a kernel crash (denial of service) on systems using the mt7921e Wi-Fi adapter when the driver module is unloaded under stress conditions. The crash is triggered locally and does not appear to allow remote code execution or privilege escalation based on available information. The primary impact is availability — a system crash or kernel panic — with no evidence of confidentiality or integrity compromise (CVE.org, Feedly).

The fix has been applied to the Linux kernel stable tree via patches committed to the kernel git repository (commits 1034d8e, b5a62d6, and ccda3eb). Users should update to a patched kernel version that includes the mt7921e driver fix. SUSE Linux has issued kernel security updates (SUSE-2026:0263-1 and SUSE-2026:0317-1) that address this vulnerability (LinuxSecurity, LinuxSecurity). As a workaround, avoid performing repeated insmod/rmmod stress testing of the mt7921e driver on unpatched kernels.