CVE-2022-49519

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A double free issue exists in the Linux kernel within the Atheros/Qualcomm wireless adapter driver. The problem occurs when a firmware recovery, triggered by ath10k core restart() calling ath10k halt(), is immediately followed by a system suspend event. In this scenario, the restart worker thread is frozen, and the suspend event triggers ath10k stop(), which invokes ath10k halt() a second time. This double invocation causes the function ath10k htt rx free() to be called twice for the same memory allocation, leading to a kernel crash. This issue can impact the confidentiality, integrity, and availability of protected information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.