CVE-2022-49131

Source
https://nvd.nist.gov/vuln/detail/CVE-2022-49131
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-49131.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-49131
Downstream
Related
Published
2025-02-26T01:55:06Z
Modified
2025-10-21T09:26:34.111029Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
ath11k: fix kernel panic during unload/load ath11k modules
Details

In the Linux kernel, the following vulnerability has been resolved:

ath11k: fix kernel panic during unload/load ath11k modules

Call netifnapidel() from ath11kahbfreeextirq() to fix the following kernel panic when unload/load ath11k modules for few iterations.

[ 971.201365] Unable to handle kernel paging request at virtual address 6d97a208 [ 971.204227] pgd = 594c2919 [ 971.211478] [6d97a208] *pgd=00000000 [ 971.214120] Internal error: Oops: 5 [#1] PREEMPT SMP ARM [ 971.412024] CPU: 2 PID: 4435 Comm: insmod Not tainted 5.4.89 #0 [ 971.434256] Hardware name: Generic DT based system [ 971.440165] PC is at napibyid+0x10/0x40 [ 971.445019] LR is at netifnapiadd+0x160/0x1dc

[ 971.743127] (napibyid) from [<807d89a0>] (netifnapiadd+0x160/0x1dc) [ 971.751295] (netifnapiadd) from [<7f1209ac>] (ath11kahbconfigirq+0xf8/0x414 [ath11kahb]) [ 971.759164] (ath11kahbconfigirq [ath11kahb]) from [<7f12135c>] (ath11kahbprobe+0x40c/0x51c [ath11kahb]) [ 971.768567] (ath11kahbprobe [ath11kahb]) from [<80666864>] (platformdrvprobe+0x48/0x94) [ 971.779670] (platformdrvprobe) from [<80664718>] (reallyprobe+0x1c8/0x450) [ 971.789389] (reallyprobe) from [<80664cc4>] (driverprobedevice+0x15c/0x1b8) [ 971.797547] (driverprobedevice) from [<80664f60>] (devicedriverattach+0x44/0x60) [ 971.805795] (devicedriverattach) from [<806650a0>] (driverattach+0x124/0x140) [ 971.814822] (driverattach) from [<80662adc>] (busforeachdev+0x58/0xa4) [ 971.823328] (busforeachdev) from [<80663a2c>] (busadddriver+0xf0/0x1e8) [ 971.831662] (busadddriver) from [<806658a4>] (driverregister+0xa8/0xf0) [ 971.839822] (driverregister) from [<8030269c>] (dooneinitcall+0x78/0x1ac) [ 971.847638] (dooneinitcall) from [<80392524>] (doinitmodule+0x54/0x200) [ 971.855968] (doinitmodule) from [<803945b0>] (loadmodule+0x1e30/0x1ffc) [ 971.864126] (loadmodule) from [<803948b0>] (sysinitmodule+0x134/0x17c) [ 971.871852] (sysinitmodule) from [<80301000>] (retfastsyscall+0x0/0x50)

Tested-on: IPQ8074 hw2.0 AHB WLAN.HK.2.6.0.1-00760-QCAHKSWPL_SILICONZ-1

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
d5c65159f2895379e11ca13f62feabe93278985d
Fixed
c6a815f5abdf324108799829dd19ea62fef4bf95
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
d5c65159f2895379e11ca13f62feabe93278985d
Fixed
c4b7653af62a9a5efe2856183d1f987c5429758b
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
d5c65159f2895379e11ca13f62feabe93278985d
Fixed
699e8c87e5c406af0f0606f40eeebd248c51b702
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
d5c65159f2895379e11ca13f62feabe93278985d
Fixed
38e488db194dc16d2eb23c77c6a8c04ff583c40d
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
d5c65159f2895379e11ca13f62feabe93278985d
Fixed
22b59cb965f79ee1accf83172441c9ca0ecb632a

Affected versions

v5.*

v5.10
v5.10-rc1
v5.10-rc2
v5.10-rc3
v5.10-rc4
v5.10-rc5
v5.10-rc6
v5.10-rc7
v5.10.1
v5.10.10
v5.10.100
v5.10.101
v5.10.102
v5.10.103
v5.10.104
v5.10.105
v5.10.106
v5.10.107
v5.10.108
v5.10.109
v5.10.11
v5.10.110
v5.10.12
v5.10.13
v5.10.14
v5.10.15
v5.10.16
v5.10.17
v5.10.18
v5.10.19
v5.10.2
v5.10.20
v5.10.21
v5.10.22
v5.10.23
v5.10.24
v5.10.25
v5.10.26
v5.10.27
v5.10.28
v5.10.29
v5.10.3
v5.10.30
v5.10.31
v5.10.32
v5.10.33
v5.10.34
v5.10.35
v5.10.36
v5.10.37
v5.10.38
v5.10.39
v5.10.4
v5.10.40
v5.10.41
v5.10.42
v5.10.43
v5.10.44
v5.10.45
v5.10.46
v5.10.47
v5.10.48
v5.10.49
v5.10.5
v5.10.50
v5.10.51
v5.10.52
v5.10.53
v5.10.54
v5.10.55
v5.10.56
v5.10.57
v5.10.58
v5.10.59
v5.10.6
v5.10.60
v5.10.61
v5.10.62
v5.10.63
v5.10.64
v5.10.65
v5.10.66
v5.10.67
v5.10.68
v5.10.69
v5.10.7
v5.10.70
v5.10.71
v5.10.72
v5.10.73
v5.10.74
v5.10.75
v5.10.76
v5.10.77
v5.10.78
v5.10.79
v5.10.8
v5.10.80
v5.10.81
v5.10.82
v5.10.83
v5.10.84
v5.10.85
v5.10.86
v5.10.87
v5.10.88
v5.10.89
v5.10.9
v5.10.90
v5.10.91
v5.10.92
v5.10.93
v5.10.94
v5.10.95
v5.10.96
v5.10.97
v5.10.98
v5.10.99
v5.11
v5.11-rc1
v5.11-rc2
v5.11-rc3
v5.11-rc4
v5.11-rc5
v5.11-rc6
v5.11-rc7
v5.12
v5.12-rc1
v5.12-rc1-dontuse
v5.12-rc2
v5.12-rc3
v5.12-rc4
v5.12-rc5
v5.12-rc6
v5.12-rc7
v5.12-rc8
v5.13
v5.13-rc1
v5.13-rc2
v5.13-rc3
v5.13-rc4
v5.13-rc5
v5.13-rc6
v5.13-rc7
v5.14
v5.14-rc1
v5.14-rc2
v5.14-rc3
v5.14-rc4
v5.14-rc5
v5.14-rc6
v5.14-rc7
v5.15
v5.15-rc1
v5.15-rc2
v5.15-rc3
v5.15-rc4
v5.15-rc5
v5.15-rc6
v5.15-rc7
v5.15.1
v5.15.10
v5.15.11
v5.15.12
v5.15.13
v5.15.14
v5.15.15
v5.15.16
v5.15.17
v5.15.18
v5.15.19
v5.15.2
v5.15.20
v5.15.21
v5.15.22
v5.15.23
v5.15.24
v5.15.25
v5.15.26
v5.15.27
v5.15.28
v5.15.29
v5.15.3
v5.15.30
v5.15.31
v5.15.32
v5.15.33
v5.15.4
v5.15.5
v5.15.6
v5.15.7
v5.15.8
v5.15.9
v5.16
v5.16-rc1
v5.16-rc2
v5.16-rc3
v5.16-rc4
v5.16-rc5
v5.16-rc6
v5.16-rc7
v5.16-rc8
v5.16.1
v5.16.10
v5.16.11
v5.16.12
v5.16.13
v5.16.14
v5.16.15
v5.16.16
v5.16.17
v5.16.18
v5.16.19
v5.16.2
v5.16.3
v5.16.4
v5.16.5
v5.16.6
v5.16.7
v5.16.8
v5.16.9
v5.17
v5.17-rc1
v5.17-rc2
v5.17-rc3
v5.17-rc4
v5.17-rc5
v5.17-rc6
v5.17-rc7
v5.17-rc8
v5.17.1
v5.17.2
v5.4
v5.4-rc6
v5.4-rc7
v5.4-rc8
v5.5
v5.5-rc1
v5.5-rc2
v5.5-rc3
v5.5-rc4
v5.5-rc5
v5.5-rc6
v5.5-rc7
v5.6
v5.6-rc1
v5.6-rc2
v5.6-rc3
v5.6-rc4
v5.6-rc5
v5.6-rc6
v5.6-rc7
v5.7
v5.7-rc1
v5.7-rc2
v5.7-rc3
v5.7-rc4
v5.7-rc5
v5.7-rc6
v5.7-rc7
v5.8
v5.8-rc1
v5.8-rc2
v5.8-rc3
v5.8-rc4
v5.8-rc5
v5.8-rc6
v5.8-rc7
v5.9
v5.9-rc1
v5.9-rc2
v5.9-rc3
v5.9-rc4
v5.9-rc5
v5.9-rc6
v5.9-rc7
v5.9-rc8

Database specific

vanir_signatures

[
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c4b7653af62a9a5efe2856183d1f987c5429758b",
        "target": {
            "file": "drivers/net/wireless/ath/ath11k/ahb.c"
        },
        "digest": {
            "line_hashes": [
                "258372981717493590377249280499373627426",
                "38589637071097538064362282248768220231",
                "191516342886786114840886306357939449063",
                "121502595523639521626828435591607007251"
            ],
            "threshold": 0.9
        },
        "deprecated": false,
        "id": "CVE-2022-49131-15cf3732",
        "signature_version": "v1",
        "signature_type": "Line"
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@699e8c87e5c406af0f0606f40eeebd248c51b702",
        "target": {
            "function": "ath11k_ahb_free_ext_irq",
            "file": "drivers/net/wireless/ath/ath11k/ahb.c"
        },
        "digest": {
            "function_hash": "110298175546667422865084429345330707671",
            "length": 282.0
        },
        "deprecated": false,
        "id": "CVE-2022-49131-4ac60f0e",
        "signature_version": "v1",
        "signature_type": "Function"
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@22b59cb965f79ee1accf83172441c9ca0ecb632a",
        "target": {
            "function": "ath11k_ahb_free_ext_irq",
            "file": "drivers/net/wireless/ath/ath11k/ahb.c"
        },
        "digest": {
            "function_hash": "110298175546667422865084429345330707671",
            "length": 282.0
        },
        "deprecated": false,
        "id": "CVE-2022-49131-6d907db9",
        "signature_version": "v1",
        "signature_type": "Function"
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c6a815f5abdf324108799829dd19ea62fef4bf95",
        "target": {
            "file": "drivers/net/wireless/ath/ath11k/ahb.c"
        },
        "digest": {
            "line_hashes": [
                "258372981717493590377249280499373627426",
                "38589637071097538064362282248768220231",
                "191516342886786114840886306357939449063",
                "121502595523639521626828435591607007251"
            ],
            "threshold": 0.9
        },
        "deprecated": false,
        "id": "CVE-2022-49131-723ead68",
        "signature_version": "v1",
        "signature_type": "Line"
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@38e488db194dc16d2eb23c77c6a8c04ff583c40d",
        "target": {
            "file": "drivers/net/wireless/ath/ath11k/ahb.c"
        },
        "digest": {
            "line_hashes": [
                "258372981717493590377249280499373627426",
                "38589637071097538064362282248768220231",
                "191516342886786114840886306357939449063",
                "121502595523639521626828435591607007251"
            ],
            "threshold": 0.9
        },
        "deprecated": false,
        "id": "CVE-2022-49131-73ecca81",
        "signature_version": "v1",
        "signature_type": "Line"
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@22b59cb965f79ee1accf83172441c9ca0ecb632a",
        "target": {
            "file": "drivers/net/wireless/ath/ath11k/ahb.c"
        },
        "digest": {
            "line_hashes": [
                "258372981717493590377249280499373627426",
                "38589637071097538064362282248768220231",
                "191516342886786114840886306357939449063",
                "121502595523639521626828435591607007251"
            ],
            "threshold": 0.9
        },
        "deprecated": false,
        "id": "CVE-2022-49131-96bafbf2",
        "signature_version": "v1",
        "signature_type": "Line"
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c4b7653af62a9a5efe2856183d1f987c5429758b",
        "target": {
            "function": "ath11k_ahb_free_ext_irq",
            "file": "drivers/net/wireless/ath/ath11k/ahb.c"
        },
        "digest": {
            "function_hash": "110298175546667422865084429345330707671",
            "length": 282.0
        },
        "deprecated": false,
        "id": "CVE-2022-49131-9bd9b06c",
        "signature_version": "v1",
        "signature_type": "Function"
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c6a815f5abdf324108799829dd19ea62fef4bf95",
        "target": {
            "function": "ath11k_ahb_free_ext_irq",
            "file": "drivers/net/wireless/ath/ath11k/ahb.c"
        },
        "digest": {
            "function_hash": "110298175546667422865084429345330707671",
            "length": 282.0
        },
        "deprecated": false,
        "id": "CVE-2022-49131-b303015a",
        "signature_version": "v1",
        "signature_type": "Function"
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@38e488db194dc16d2eb23c77c6a8c04ff583c40d",
        "target": {
            "function": "ath11k_ahb_free_ext_irq",
            "file": "drivers/net/wireless/ath/ath11k/ahb.c"
        },
        "digest": {
            "function_hash": "110298175546667422865084429345330707671",
            "length": 282.0
        },
        "deprecated": false,
        "id": "CVE-2022-49131-ce40d667",
        "signature_version": "v1",
        "signature_type": "Function"
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@699e8c87e5c406af0f0606f40eeebd248c51b702",
        "target": {
            "file": "drivers/net/wireless/ath/ath11k/ahb.c"
        },
        "digest": {
            "line_hashes": [
                "258372981717493590377249280499373627426",
                "38589637071097538064362282248768220231",
                "191516342886786114840886306357939449063",
                "121502595523639521626828435591607007251"
            ],
            "threshold": 0.9
        },
        "deprecated": false,
        "id": "CVE-2022-49131-e89da193",
        "signature_version": "v1",
        "signature_type": "Line"
    }
]

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.6.0
Fixed
5.10.111
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.34
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
5.16.20
Type
ECOSYSTEM
Events
Introduced
5.17.0
Fixed
5.17.3