{"id":"CVE-2022-49131","state":"PUBLISHED","title":"ath11k: fix kernel panic during unload/load ath11k modules","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nath11k: fix kernel panic during unload/load ath11k modules\n\nCall netif_napi_del() from ath11k_ahb_free_ext_irq() to fix\nthe following kernel panic when unload/load ath11k modules\nfor few iterations.\n\n[  971.201365] Unable to handle kernel paging request at virtual address 6d97a208\n[  971.204227] pgd = 594c2919\n[  971.211478] [6d97a208] *pgd=00000000\n[  971.214120] Internal error: Oops: 5 [#1] PREEMPT SMP ARM\n[  971.412024] CPU: 2 PID: 4435 Comm: insmod Not tainted 5.4.89 #0\n[  971.434256] Hardware name: Generic DT based system\n[  971.440165] PC is at napi_by_id+0x10/0x40\n[  971.445019] LR is at netif_napi_add+0x160/0x1dc\n\n[  971.743127] (napi_by_id) from [<807d89a0>] (netif_napi_add+0x160/0x1dc)\n[  971.751295] (netif_napi_add) from [<7f1209ac>] (ath11k_ahb_config_irq+0xf8/0x414 [ath11k_ahb])\n[  971.759164] (ath11k_ahb_config_irq [ath11k_ahb]) from [<7f12135c>] (ath11k_ahb_probe+0x40c/0x51c [ath11k_ahb])\n[  971.768567] (ath11k_ahb_probe [ath11k_ahb]) from [<80666864>] (platform_drv_probe+0x48/0x94)\n[  971.779670] (platform_drv_probe) from [<80664718>] (really_probe+0x1c8/0x450)\n[  971.789389] (really_probe) from [<80664cc4>] (driver_probe_device+0x15c/0x1b8)\n[  971.797547] (driver_probe_device) from [<80664f60>] (device_driver_attach+0x44/0x60)\n[  971.805795] (device_driver_attach) from [<806650a0>] (__driver_attach+0x124/0x140)\n[  971.814822] (__driver_attach) from [<80662adc>] (bus_for_each_dev+0x58/0xa4)\n[  971.823328] (bus_for_each_dev) from [<80663a2c>] (bus_add_driver+0xf0/0x1e8)\n[  971.831662] (bus_add_driver) from [<806658a4>] (driver_register+0xa8/0xf0)\n[  971.839822] (driver_register) from [<8030269c>] (do_one_initcall+0x78/0x1ac)\n[  971.847638] (do_one_initcall) from [<80392524>] (do_init_module+0x54/0x200)\n[  971.855968] (do_init_module) from [<803945b0>] (load_module+0x1e30/0x1ffc)\n[  971.864126] (load_module) from [<803948b0>] (sys_init_module+0x134/0x17c)\n[  971.871852] (sys_init_module) from [<80301000>] (ret_fast_syscall+0x0/0x50)\n\nTested-on: IPQ8074 hw2.0 AHB WLAN.HK.2.6.0.1-00760-QCAHKSWPL_SILICONZ-1","publishedAt":"2025-02-26T01:55:06.615Z","updatedAt":"2026-05-11T18:53:45.702Z","severity":{"score":5.5,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","source":"CISA-ADP"},"assigner":"Linux","products":["Linux Linux"],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"d5c65159f2895379e11ca13f62feabe93278985d","status":"affected","lessThan":"c6a815f5abdf324108799829dd19ea62fef4bf95","versionType":"git"},{"version":"d5c65159f2895379e11ca13f62feabe93278985d","status":"affected","lessThan":"c4b7653af62a9a5efe2856183d1f987c5429758b","versionType":"git"},{"version":"d5c65159f2895379e11ca13f62feabe93278985d","status":"affected","lessThan":"699e8c87e5c406af0f0606f40eeebd248c51b702","versionType":"git"},{"version":"d5c65159f2895379e11ca13f62feabe93278985d","status":"affected","lessThan":"38e488db194dc16d2eb23c77c6a8c04ff583c40d","versionType":"git"},{"version":"d5c65159f2895379e11ca13f62feabe93278985d","status":"affected","lessThan":"22b59cb965f79ee1accf83172441c9ca0ecb632a","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/net/wireless/ath/ath11k/ahb.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"5.6","status":"affected"},{"version":"0","status":"unaffected","lessThan":"5.6","versionType":"semver"},{"version":"5.10.111","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.34","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"5.16.20","status":"unaffected","lessThanOrEqual":"5.16.*","versionType":"semver"},{"version":"5.17.3","status":"unaffected","lessThanOrEqual":"5.17.*","versionType":"semver"},{"version":"5.18","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/net/wireless/ath/ath11k/ahb.c"]}],"references":["https://git.kernel.org/stable/c/c6a815f5abdf324108799829dd19ea62fef4bf95","https://git.kernel.org/stable/c/c4b7653af62a9a5efe2856183d1f987c5429758b","https://git.kernel.org/stable/c/699e8c87e5c406af0f0606f40eeebd248c51b702","https://git.kernel.org/stable/c/38e488db194dc16d2eb23c77c6a8c04ff583c40d","https://git.kernel.org/stable/c/22b59cb965f79ee1accf83172441c9ca0ecb632a"],"weaknesses":[],"ingestedAt":"2026-10-29T20:05:26.763Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2022/49xxx/CVE-2022-49131.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2022-49131","state":"PUBLISHED","datePublished":"2025-02-26T01:55:06.615Z","dateUpdated":"2026-05-11T18:53:45.702Z","assignerShortName":"Linux","assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateReserved":"2025-02-26T01:49:39.267Z"},"containers":{"cna":{"title":"ath11k: fix kernel panic during unload/load ath11k modules","descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\nath11k: fix kernel panic during unload/load ath11k modules\n\nCall netif_napi_del() from ath11k_ahb_free_ext_irq() to fix\nthe following kernel panic when unload/load ath11k modules\nfor few iterations.\n\n[  971.201365] Unable to handle kernel paging request at virtual address 6d97a208\n[  971.204227] pgd = 594c2919\n[  971.211478] [6d97a208] *pgd=00000000\n[  971.214120] Internal error: Oops: 5 [#1] PREEMPT SMP ARM\n[  971.412024] CPU: 2 PID: 4435 Comm: insmod Not tainted 5.4.89 #0\n[  971.434256] Hardware name: Generic DT based system\n[  971.440165] PC is at napi_by_id+0x10/0x40\n[  971.445019] LR is at netif_napi_add+0x160/0x1dc\n\n[  971.743127] (napi_by_id) from [<807d89a0>] (netif_napi_add+0x160/0x1dc)\n[  971.751295] (netif_napi_add) from [<7f1209ac>] (ath11k_ahb_config_irq+0xf8/0x414 [ath11k_ahb])\n[  971.759164] (ath11k_ahb_config_irq [ath11k_ahb]) from [<7f12135c>] (ath11k_ahb_probe+0x40c/0x51c [ath11k_ahb])\n[  971.768567] (ath11k_ahb_probe [ath11k_ahb]) from [<80666864>] (platform_drv_probe+0x48/0x94)\n[  971.779670] (platform_drv_probe) from [<80664718>] (really_probe+0x1c8/0x450)\n[  971.789389] (really_probe) from [<80664cc4>] (driver_probe_device+0x15c/0x1b8)\n[  971.797547] (driver_probe_device) from [<80664f60>] (device_driver_attach+0x44/0x60)\n[  971.805795] (device_driver_attach) from [<806650a0>] (__driver_attach+0x124/0x140)\n[  971.814822] (__driver_attach) from [<80662adc>] (bus_for_each_dev+0x58/0xa4)\n[  971.823328] (bus_for_each_dev) from [<80663a2c>] (bus_add_driver+0xf0/0x1e8)\n[  971.831662] (bus_add_driver) from [<806658a4>] (driver_register+0xa8/0xf0)\n[  971.839822] (driver_register) from [<8030269c>] (do_one_initcall+0x78/0x1ac)\n[  971.847638] (do_one_initcall) from [<80392524>] (do_init_module+0x54/0x200)\n[  971.855968] (do_init_module) from [<803945b0>] (load_module+0x1e30/0x1ffc)\n[  971.864126] (load_module) from [<803948b0>] (sys_init_module+0x134/0x17c)\n[  971.871852] (sys_init_module) from [<80301000>] (ret_fast_syscall+0x0/0x50)\n\nTested-on: IPQ8074 hw2.0 AHB WLAN.HK.2.6.0.1-00760-QCAHKSWPL_SILICONZ-1"}],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"d5c65159f2895379e11ca13f62feabe93278985d","status":"affected","lessThan":"c6a815f5abdf324108799829dd19ea62fef4bf95","versionType":"git"},{"version":"d5c65159f2895379e11ca13f62feabe93278985d","status":"affected","lessThan":"c4b7653af62a9a5efe2856183d1f987c5429758b","versionType":"git"},{"version":"d5c65159f2895379e11ca13f62feabe93278985d","status":"affected","lessThan":"699e8c87e5c406af0f0606f40eeebd248c51b702","versionType":"git"},{"version":"d5c65159f2895379e11ca13f62feabe93278985d","status":"affected","lessThan":"38e488db194dc16d2eb23c77c6a8c04ff583c40d","versionType":"git"},{"version":"d5c65159f2895379e11ca13f62feabe93278985d","status":"affected","lessThan":"22b59cb965f79ee1accf83172441c9ca0ecb632a","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/net/wireless/ath/ath11k/ahb.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"5.6","status":"affected"},{"version":"0","status":"unaffected","lessThan":"5.6","versionType":"semver"},{"version":"5.10.111","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.34","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"5.16.20","status":"unaffected","lessThanOrEqual":"5.16.*","versionType":"semver"},{"version":"5.17.3","status":"unaffected","lessThanOrEqual":"5.17.*","versionType":"semver"},{"version":"5.18","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/net/wireless/ath/ath11k/ahb.c"]}],"references":[{"url":"https://git.kernel.org/stable/c/c6a815f5abdf324108799829dd19ea62fef4bf95"},{"url":"https://git.kernel.org/stable/c/c4b7653af62a9a5efe2856183d1f987c5429758b"},{"url":"https://git.kernel.org/stable/c/699e8c87e5c406af0f0606f40eeebd248c51b702"},{"url":"https://git.kernel.org/stable/c/38e488db194dc16d2eb23c77c6a8c04ff583c40d"},{"url":"https://git.kernel.org/stable/c/22b59cb965f79ee1accf83172441c9ca0ecb632a"}],"providerMetadata":{"shortName":"Linux","orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateUpdated":"2026-05-11T18:53:45.702Z"},"cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6","versionEndExcluding":"5.10.111"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6","versionEndExcluding":"5.15.34"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6","versionEndExcluding":"5.16.20"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6","versionEndExcluding":"5.17.3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6","versionEndExcluding":"5.18"}]}]}],"x_generator":{"engine":"bippy-1.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2022-49131","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2025-10-01T19:48:17.096820Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","description":"CWE-noinfo Not enough information"}]}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-10-01T19:57:02.911Z"}}]}}}