CVE-2022-49130

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A crash occurs in the ath11k driver during the removal of the ath11k pci module when the amss.bin file is missing. This is caused by the use of the mhi async power up() function, which fails to check for errors. The issue manifests as a null-pointer dereference and a general protection fault within the ath11k hal srng access begin() function.

Recommendations Replace the call to mhi async power up() with mhi sync power up() within the ath11k mhi start() function to ensure errors are properly handled.