CVE-2022-49523

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.10.120 Linux kernel versions prior to 5.15.45 Linux kernel versions prior to 5.17.13 Linux kernel versions prior to 5.18.2

Description A NULL pointer dereference exists in the ath11k spectral scan config() function within the drivers/net/wireless/ath/ath11k/spectral.c module of the Linux kernel. This issue occurs when ath11k modules are removed using rmmod while spectral scan is enabled, leading to a system crash and potential denial of service. The crash is triggered in the ath11k spectral process data() function during the spectral deinitialization process.

Recommendations Update the Linux kernel to version 5.10.120 or later. Update the Linux kernel to version 5.15.45 or later. Update the Linux kernel to version 5.17.13 or later. Update the Linux kernel to version 5.18.2 or later.