{
  "cveId": "CVE-2022-49132",
  "url": "https://patchblox.com/security/cve/CVE-2022-49132",
  "summary": "CVE-2022-49132 is fixed in linux on 1 platform, first by DEBIAN-CVE-2022-49132, released February 26, 2025. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  ath11k: pci: fix crash on suspend if board file...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  ath11k: pci: fix crash on suspend if board file is not found  Mario reported that the kernel was crashing on suspend if ath11k was not able to find a board file:  [  473.693286] PM: Suspending system (s2idle) [  473.693291] printk: Suspending console(s) (use no_console_suspend to debug) [  474.407787] BUG: unable to handle page fault for address: 0000000000002070 [  474.407791] #PF: supervisor read access in kernel mode [  474.407794] #PF: error_code(0x0000) - not-present page [  474.407798] PGD 0 P4D 0 [  474.407801] Oops: 0000 [#1] PREEMPT SMP NOPTI [  474.407805] CPU: 2 PID: 2350 Comm: kworker/u32:14 Tainted: G        W         5.16.0 #248 [...] [  474.407868] Call Trace: [  474.407870]  \u003CTASK\u003E [  474.407874]  ? _raw_spin_lock_irqsave\u002B0x2a/0x60 [  474.407882]  ? lock_timer_base\u002B0x72/0xa0 [  474.407889]  ? _raw_spin_unlock_irqrestore\u002B0x29/0x3d [  474.407892]  ? try_to_del_timer_sync\u002B0x54/0x80 [  474.407896]  ath11k_dp_rx_pktlog_stop\u002B0x49/0xc0 [ath11k] [  474.407912]  ath11k_core_suspend\u002B0x34/0x130 [ath11k] [  474.407923]  ath11k_pci_pm_suspend\u002B0x1b/0x50 [ath11k_pci] [  474.407928]  pci_pm_suspend\u002B0x7e/0x170 [  474.407935]  ? pci_pm_freeze\u002B0xc0/0xc0 [  474.407939]  dpm_run_callback\u002B0x4e/0x150 [  474.407947]  __device_suspend\u002B0x148/0x4c0 [  474.407951]  async_suspend\u002B0x20/0x90 dmesg-efi-164255130401001: Oops#1 Part1 [  474.407955]  async_run_entry_fn\u002B0x33/0x120 [  474.407959]  process_one_work\u002B0x220/0x3f0 [  474.407966]  worker_thread\u002B0x4a/0x3d0 [  474.407971]  kthread\u002B0x17a/0x1a0 [  474.407975]  ? process_one_work\u002B0x3f0/0x3f0 [  474.407979]  ? set_kthread_struct\u002B0x40/0x40 [  474.407983]  ret_from_fork\u002B0x22/0x30 [  474.407991]  \u003C/TASK\u003E  The issue here is that board file loading happens after ath11k_pci_probe() succesfully returns (ath11k initialisation happends asynchronously) and the suspend handler is still enabled, of course failing as ath11k is not properly initialised. Fix this by checking ATH11K_FLAG_QMI_FAIL during both suspend and resume.  Tested-on: WCN6855 hw2.0 PCI WLAN.HSP.1.1-03003-QCAHSPSWPL_V1_V2_SILICONZ_LITE-2",
  "published": "2025-02-26T07:00:50Z",
  "severity": "medium",
  "cvss": 5.5,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
  "epss": 0.00261,
  "epssPercentile": 0.18002,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "5.17.3-1",
      "fix": "DEBIAN-CVE-2022-49132",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-49132",
      "released": "2025-02-26T07:00:50Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "5.17.3-1",
      "fix": "DEBIAN-CVE-2022-49132",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-49132",
      "released": "2025-02-26T07:00:50Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "5.17.3-1",
      "fix": "DEBIAN-CVE-2022-49132",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-49132",
      "released": "2025-02-26T07:00:50Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T19:12:23Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}