cbcvebase.
CVE-2022-49131
published 2025-02-26

CVE-2022-49131: In the Linux kernel, the following vulnerability has been resolved: ath11k: fix kernel panic during unload/load ath11k modules Call netif_napi_del() from…

PriorityP418medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.26%
17.5th percentile
In the Linux kernel, the following vulnerability has been resolved: ath11k: fix kernel panic during unload/load ath11k modules Call netif_napi_del() from ath11k_ahb_free_ext_irq() to fix the following kernel panic when unload/load ath11k modules for few iterations. [ 971.201365] Unable to handle kernel paging request at virtual address 6d97a208 [ 971.204227] pgd = 594c2919 [ 971.211478] [6d97a208] *pgd=00000000 [ 971.214120] Internal error: Oops: 5 [#1] PREEMPT SMP ARM [ 971.412024] CPU: 2 PID: 4435 Comm: insmod Not tainted 5.4.89 #0 [ 971.434256] Hardware name: Generic DT based system [ 971.440165] PC is at napi_by_id+0x10/0x40 [ 971.445019] LR is at netif_napi_add+0x160/0x1dc [ 971.743127] (napi_by_id) from [] (netif_napi_add+0x160/0x1dc) [ 971.751295] (netif_napi_add) from [] (ath11k_ahb_config_irq+0xf8/0x414 [ath11k_ahb]) [ 971.759164] (ath11k_ahb_config_irq [ath11k_ahb]) from [] (ath11k_ahb_probe+0x40c/0x51c [ath11k_ahb]) [ 971.768567] (ath11k_ahb_probe [ath11k_ahb]) from [] (platform_drv_probe+0x48/0x94) [ 971.779670] (platform_drv_probe) from [] (really_probe+0x1c8/0x450) [ 971.789389] (really_probe) from [] (driver_probe_device+0x15c/0x1b8) [ 971.797547] (driver_probe_device) from [] (device_driver_attach+0x44/0x60) [ 971.805795] (device_driver_attach) from [] (__driver_attach+0x124/0x140) [ 971.814822] (__driver_attach) from [] (bus_for_each_dev+0x58/0xa4) [ 971.823328] (bus_for_each_dev) from [] (bus_add_driver+0xf0/0x1e8) [ 971.831662] (bus_add_driver) from [] (driver_register+0xa8/0xf0) [ 971.839822] (driver_register) from [] (do_one_initcall+0x78/0x1ac) [ 971.847638] (do_one_initcall) from [] (do_init_module+0x54/0x200) [ 971.855968] (do_init_module) from [] (load_module+0x1e30/0x1ffc) [ 971.864126] (load_module) from [] (sys_init_module+0x134/0x17c) [ 971.871852] (sys_init_module) from [] (ret_fast_syscall+0x0/0x50) Tested-on: IPQ8074 hw2.0 AHB WLAN.HK.2.6.0.1-00760-QCAHKSWPL_SILICONZ-1

Affected

15 ranges
VendorProductVersion rangeFixed in
debianlinux< linux 5.17.3-1 (bookworm)linux 5.17.3-1 (bookworm)
linuxlinux——
linuxlinux>= d5c65159f2895379e11ca13f62feabe93278985d < c6a815f5abdf324108799829dd19ea62fef4bf95c6a815f5abdf324108799829dd19ea62fef4bf95
linuxlinux>= d5c65159f2895379e11ca13f62feabe93278985d < c4b7653af62a9a5efe2856183d1f987c5429758bc4b7653af62a9a5efe2856183d1f987c5429758b
linuxlinux>= d5c65159f2895379e11ca13f62feabe93278985d < 699e8c87e5c406af0f0606f40eeebd248c51b702699e8c87e5c406af0f0606f40eeebd248c51b702
linuxlinux>= d5c65159f2895379e11ca13f62feabe93278985d < 38e488db194dc16d2eb23c77c6a8c04ff583c40d38e488db194dc16d2eb23c77c6a8c04ff583c40d
linuxlinux>= d5c65159f2895379e11ca13f62feabe93278985d < 22b59cb965f79ee1accf83172441c9ca0ecb632a22b59cb965f79ee1accf83172441c9ca0ecb632a
linuxlinux_kernel< 5.10.1115.10.111
linuxlinux_kernel>= 0 < 5.10.113-15.10.113-1
linuxlinux_kernel>= 0 < 5.17.3-15.17.3-1
linuxlinux_kernel>= 0 < 5.17.3-15.17.3-1
linuxlinux_kernel>= 0 < 5.17.3-15.17.3-1
linuxlinux_kernel>= 5.11 < 5.15.345.15.34
linuxlinux_kernel>= 5.16 < 5.16.205.16.20
linuxlinux_kernel>= 5.17 < 5.17.35.17.3

CVSS provenance

nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.