PT-2025-8476 · Linux+4 · Linux Kernel+4

Published 2022-01-01 · Updated 2026-05-26 · CVE-2022-49543

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.17.0-rc3-wt-ath+ #579

Description A warning message is generated in the Linux kernel when testing device recovery with specific commands, due to a mismatch in the mhi deassert dev wake() and mhi assert dev wake() calls. This issue occurs because the pm state of the MHI device is not in the normal state until recovery is completed, causing the dev wake to be non-zero and resulting in a warning print in mhi pm disable transition(). The estimated number of potentially affected devices worldwide is not available.

Recommendations To resolve this issue, apply the patch that adds a check in ath11k pci write32() and ath11k pci read32() to skip calling mhi device put() if mhi device get sync() does not really do wake. This fix is available in the commit 8e0559921f9a. As a temporary workaround, consider disabling the mhi pm disable transition() function until a patch is available.

Exploit

Fix

Improper Resource Release

Weakness Enumeration

CWE-404

Related Identifiers

ALSA-2025_16880

BDU:2026-02061

CESA-2022_7683

CVE-2022-49543

RHSA-2022:7683

RHSA-2022:8267

RHSA-2022_7683

RHSA-2022_8267

SUSE-SU-2025:1176-1

SUSE-SU-2025:1241-1

SUSE-SU-2025_1241-1

Affected Products

Centos

Debian

Linux Kernel

Red Hat

Suse

References · 1308

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49543.json · Exploit
• https://git.kernel.org/stable/c/a2d9b7357469949ad02f511fc69f8fa3a1afbf89 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49543 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2022-49543 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-49543 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-49543 · Vendor Advisory
• https://git.kernel.org/stable/c/0d7a8a6204ea9271f1d0a8c66a9fd2f54d2e3cbc · Patch
• https://git.kernel.org/stable/c/5f18206cddae033c488e4879f198699092ca0524 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:1176-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-49543 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49543 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49543 · Security Note
• https://bdu.fstec.ru/vul/2026-02061 · Security Note
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2022-49543 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-49543 · Vendor Advisory