PT-2025-8060 · Ath11K+4 · Ath11K+4

Mario Limonciello · Published 2022-01-01 · Updated 2026-03-14 · CVE-2022-49132

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the version that includes the fix for the issue described

Description A crash occurs in the Linux kernel when the system is suspended and the ath11k driver is unable to find a board file. This issue arises because the board file loading happens after the ath11k pci probe() function successfully returns, and the suspend handler is still enabled, causing it to fail as ath11k is not properly initialized. The problem is resolved by checking the ATH11K FLAG QMI FAIL flag during both suspend and resume.

Recommendations For Linux kernel versions prior to the fixed version, consider applying the patch that fixes the issue by checking the ATH11K FLAG QMI FAIL flag during both suspend and resume to prevent the crash.

Exploit

Fix

Use of Uninitialized Resource

Buffer Overflow

Weakness Enumeration

CWE-908

CWE-119

Related Identifiers

BDU:2026-03555

CVE-2022-49132

SUSE-SU-2025:1027-1

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1241-1

SUSE-SU-2025_1027-1

SUSE-SU-2025_1241-1

Affected Products

Astra Linux

Debian

Linux Kernel

Suse

Ath11K

References · 1335

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49132.json · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49132 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1027-1 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2022-49132 · Vendor Advisory
• https://git.kernel.org/stable/c/f3c5ef433da82d257337424b3647ce9dcb37d4b5 · Patch
• https://bdu.fstec.ru/vul/2026-03555 · Security Note
• https://git.kernel.org/stable/c/aeed776c00e804a0f7896db39c7c661cea34ee1f · Patch
• https://osv.dev/vulnerability/CVE-2022-49132 · Vendor Advisory
• https://git.kernel.org/stable/c/fed4cef115ab21a18faf499b3fa9b9a4b544f941 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:1241-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49132 · Vendor Advisory
• https://git.kernel.org/stable/c/b4f4c56459a5c744f7f066b9fc2b54ea995030c5 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:1176-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-49132 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-49132 · Vendor Advisory