PT-2025-8456 · Linux+2 · Linux Kernel+2

Hari Chandrakanthan + 1 · Published 2022-04-27 · Updated 2025-04-14 · CVE-2022-49523

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A crash is observed in the Linux kernel when ath11k modules are removed using rmmod with spectral scan enabled. The crash occurs due to a NULL pointer dereference. To avoid this crash, a spectral scan disable WMI command is sent to the firmware before cleaning the spectral dbring in the spectral deinit API.

Recommendations As a temporary workaround, consider disabling the spectral scan feature until a patch is available. To resolve the issue, send a spectral scan disable WMI command to the firmware before cleaning the spectral dbring in the spectral deinit API.

Exploit

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

BDU:2026-02619

CVE-2022-49523

SUSE-SU-2025:1027-1

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1241-1

SUSE-SU-2025_1027-1

SUSE-SU-2025_1241-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 1336

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49523.json · Exploit
• https://git.kernel.org/stable/c/451b9076903a057b7b8d5b24dc84b3e436a1c743 · Patch
• https://ubuntu.com/security/CVE-2022-49523 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1027-1 · Vendor Advisory
• https://git.kernel.org/stable/c/4b9c54caef58d2b55074710952cda70540722c01 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49523 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49523 · Security Note
• https://git.kernel.org/stable/c/8f15e67af9bec5a69e815e0230a70cffddae371a · Patch
• https://git.kernel.org/stable/c/60afa4f4e1350c876d8a061182a70c224de275dd · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:1241-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-49523 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1176-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49523 · Vendor Advisory
• https://git.kernel.org/stable/c/161c64de239c7018e0295e7e0520a19f00aa32dc · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:1183-1 · Vendor Advisory