PT-2025-8051 · Linux+4 · Linux Kernel+4

Published 2022-01-01 · Updated 2026-05-26 · CVE-2022-49123

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been identified, related to the ath11k module. The issue causes frames flush failure due to a deadlock, resulting in warnings such as "failed to flush mgmt transmit queue 0" and "dropping mgmt frame for vdev 0, is started 0". This occurs because the wmi mgmt tx work function has no chance to run within 5 seconds. Increasing the /proc/sys/kernel/hung task timeout secs to 20 and ATH11K FLUSH TIMEOUT to 50 may help mitigate the issue, but it is not a permanent fix.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Improper Locking

Weakness Enumeration

CWE-667

Related Identifiers

ALSA-2025_16880

CESA-2022_7683

CVE-2022-49123

RHSA-2022:7683

RHSA-2022:8267

RHSA-2022_7683

RHSA-2022_8267

SUSE-SU-2025:1176-1

SUSE-SU-2025:1241-1

SUSE-SU-2025_1241-1

Affected Products

Centos

Debian

Linux Kernel

Red Hat

Suse

References · 1301

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49123.json · Exploit
• https://ubuntu.com/security/CVE-2022-49123 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2022-49123 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2022-49123 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49123 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1176-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49123 · Security Note
• https://git.kernel.org/stable/c/261b07519518bd14cb168b287b17e1d195f8d0c8 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49123 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-49123 · Vendor Advisory
• https://git.kernel.org/stable/c/33e723dc054edfc94da90eecca3b72cb424ce4a3 · Patch
• https://osv.dev/vulnerability/CVE-2022-49123 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-49123 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:1241-1 · Vendor Advisory
• https://bugzilla.suse.com/1237969 · Note