CVE-2022-49543: ath11k: fix the warning of dev_wake in mhi_pm_disable_transition()
ath11k: fix the warning of devwake in mhipmdisabletransition()
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Linux kernel bus/mhi core (mhi_pm_disable_transition/dev_wake warning fix)to a version that resolves this vulnerability.Patch 8e0559921f9a - Configuration
When performing device recovery testing, use the ath11k debugfs interface to simulate firmware crash via: echo assert > /sys/kernel/debug/ath11k/qca6390 hw2.0/simulate_fw_crash (this is referenced as the test scenario that previously triggered the WARNING).
ath11k debugfs (simulate firmware crash) /sys/kernel/debug/ath11k/qca6390 hw2.0/simulate_fw_crash = echo assert - Configuration
When performing device recovery testing, use the ath11k debugfs interface to simulate firmware crash via: echo assert > /sys/kernel/debug/ath11k/wcn6855 hw2.0/simulate_fw_crash (this is referenced as the test scenario that previously triggered the WARNING).
ath11k debugfs (simulate firmware crash) /sys/kernel/debug/ath11k/wcn6855 hw2.0/simulate_fw_crash = echo assert
Event History
Frequently Asked Questions
What is the severity of CVE-2022-49543?
CVE-2022-49543 is classified with a severity rating that indicates a medium risk due to the potential for system warnings affecting device recovery.
How do I fix CVE-2022-49543?
To fix CVE-2022-49543, you should update the Linux kernel to version 5.17.14 or later, or any version from 5.18.0 to 5.18.3.
What causes CVE-2022-49543 in the Linux kernel?
CVE-2022-49543 is caused by a warning in the dev_wake function during device recovery procedures in the ath11k driver.
Which versions of the Linux kernel are affected by CVE-2022-49543?
CVE-2022-49543 affects Linux kernel versions from 5.6 to 5.17.14 and also includes versions from 5.18.0 to 5.18.3.
Is CVE-2022-49543 exploitable from outside the local network?
CVE-2022-49543 does not present an external exploit risk; it primarily affects local device operations in the affected Linux kernel versions.