PT-2025-8476 · Linux+4 · Linux Kernel+4

CVE-2022-49543

·

Published

2022-01-01

·

Updated

2026-08-23

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description An issue exists in the ath11k driver where a warning is triggered in the mhi pm disable transition() function during device recovery. This occurs because mhi deassert dev wake() is called via mhi device put() without a preceding call to mhi assert dev wake() from mhi device get sync(). This state is caused by a check for the pm state of the MHI, which remains in a non-normal state until recovery is complete, resulting in a non-zero dev wake value. Additionally, the ath11k pci write32() function in the drivers/net/wireless/ath/ath11k/pci.c module may fail to correctly release resources, which could potentially lead to a denial of service.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Resource Release

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

ALSA-2025_16880
BDU:2026-02061
CESA-2022_7683
CVE-2022-49543
RHSA-2022:7683
RHSA-2022:8267
RHSA-2022_7683
RHSA-2022_8267
SUSE-SU-2025:1176-1
SUSE-SU-2025:1241-1
SUSE-SU-2025_1241-1

Affected Products

Centos
Debian
Linux Kernel
Red Hat
Suse