Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
Linux Linux — wl1251: dynamically allocate memory used for DMA
AV AC PR UI S C I A CVSS EPSS %ile KEV
L L L N U N N H 5.5 .0027 18.6 —
AFFECTED
Product Versions Fixed
Linux a1c510d0adc604bb143c86052bc5be48cbcfa17c – —
Linux 5.18 – 5.18.3
TIMELINE
Feb 26 Reserved by Linux
Feb 26 Published (CNA: Linux)
Aug 4 RESCORED — CVE-2022-49500 (Linux). CVSS 8.8 → 5.5 (NVD).
Description
In the Linux kernel, the following vulnerability has been resolved:
wl1251: dynamically allocate memory used for DMA
With introduction of vmap'ed stacks, stack parameters can no
longer be used for DMA and now leads to kernel panic.
It happens at several places for the wl1251 (e.g. when
accessed through SDIO) making it unuseable on e.g. the
OpenPandora.
We solve this by allocating temporary buffers or use wl1251_read32().
Tested on v5.18-rc5 with OpenPandora.
Lifecycle
Complete event history — 3 events, chronological
| Date | Event | Detail |
| February 26, 2025 | Reserved | Reserved by Linux |
| February 26, 2025 | Published | Published (CNA: Linux) |
| August 4, 2026 | RESCORED | RESCORED — CVE-2022-49500 (Linux). CVSS 8.8 → 5.5 (NVD). |
Affected
Affected products and packages — 2 rows
| Vendor | Product / Package | Ecosystem | Version introduced | Fixed |
| Linux | Linux | — | a1c510d0adc604bb143c86052bc5be48cbcfa17c | — |
| Linux | Linux | — | 5.18 | 5.18.3 |
About this page
This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2022-49500 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Wednesday, August 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.