PT-2025-8452 · Linux+4 · Linux Kernel+4
Published
2023-05-09
·
Updated
2025-04-16
·
CVE-2022-49519
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A double free crash is observed in the Linux kernel when a firmware recovery, caused by a WMI timeout or crash, is followed by an immediate suspend event. This issue occurs because the
ath10k halt() function is called twice, once during the firmware recovery and again during the suspend event, leading to a crash. The ath10k stop() function triggers ath10k halt() during the suspend event, and if the driver is in the ATH10K STATE RESTARTING state, the ath10k wait for suspend() function is skipped. To fix this issue, the ath10k halt() call is skipped in ath10k stop() when the driver is in the ATH10K STATE RESTARTING state, and ath10k wait for suspend() is called instead.Recommendations
To resolve this issue, update the Linux kernel to a version that includes the fix, which skips the
ath10k halt() call in ath10k stop() when the driver is in the ATH10K STATE RESTARTING state and calls ath10k wait for suspend() instead. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
Double Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Centos
Linux Kernel
Red Hat
Suse