Linux · Linux Kernel · CVE-2022-49523
**Name of the Vulnerable Software and Affected Versions**
Linux kernel versions prior to 5.10.120
Linux kernel versions prior to 5.15.45
Linux kernel versions prior to 5.17.13
Linux kernel versions prior to 5.18.2
**Description**
A NULL pointer dereference exists in the `ath11k spectral scan config()` function within the `drivers/net/wireless/ath/ath11k/spectral.c` module of the Linux kernel. This issue occurs when `ath11k` modules are removed using `rmmod` while spectral scan is enabled, leading to a system crash and potential denial of service. The crash is triggered in the `ath11k spectral process data()` function during the spectral deinitialization process.
**Recommendations**
Update the Linux kernel to version 5.10.120 or later.
Update the Linux kernel to version 5.15.45 or later.
Update the Linux kernel to version 5.17.13 or later.
Update the Linux kernel to version 5.18.2 or later.