PT-2025-52930 · Wcn3990+3 · Wcn3990+3

CVE-2022-50700

·

Published

2025-12-24

·

Updated

2026-08-23

CVSS v3.1

7.5

High

VectorAV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The Linux kernel contains a flaw within the ath10k driver related to buffer unmapping on WCN3990 hardware. Specifically, a race condition can occur where the driver unmaps and frees a buffer while the hardware is still processing it, leading to an SMMU fault and a potential kernel panic. This issue arises on copy engine channel 3 (CE3) during WMI command processing. A delay has been added before unmapping the copy engine source DMA buffer as a workaround. The crash signature involves an arm-smmu unhandled context fault and errors related to the copy engine.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

CVE-2022-50700
RHSA-2023:6583
RHSA-2023:7077
SUSE-SU-2026:0263-1
SUSE-SU-2026:0316-1
SUSE-SU-2026:0317-1
SUSE-SU-2026:0350-1
SUSE-SU-2026:0369-1
SUSE-SU-2026:0411-1
SUSE-SU-2026:0617-1
SUSE-SU-2026:0696-1
SUSE-SU-2026:0698-1
SUSE-SU-2026:0700-1
SUSE-SU-2026:0707-1
SUSE-SU-2026:0711-1
SUSE-SU-2026:0713-1
SUSE-SU-2026:0725-1
SUSE-SU-2026:0727-1
SUSE-SU-2026:0731-1

Affected Products

Debian
Linux Kernel
Wcn3990
Ath10K