Vulnerability in ath10k driver for Kernel: ath10k_halt during suspend for driver state RESTARTING
Summary
GSD-2022-1003387: ath10k: skip ath10k_halt during suspend for driver state RESTARTING. Affects Kernel versions < c2272428090d0d215a3f017cbbbad731c07eee53. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The ath10k driver is a component of the Linux Kernel that provides support for Qualcomm Atheros 802.11ac wireless LAN (WLAN) devices. It enables communication between the operating system and the WLAN hardware, allowing users to connect to wireless networks. The driver is responsible for managing various aspects of the WLAN functionality, including device initialization, firmware loading, and data transmission. However, a vulnerability has been discovered in the ath10k driver that affects its behavior during the suspend process when the driver state is set to RESTARTING.
Vulnerability Detail
The vulnerability in the ath10k driver occurs when the driver is in the RESTARTING state during the suspend process. In this state, the driver should skip the ath10k_halt function, which is responsible for halting the WLAN device. However, due to a coding error, the ath10k_halt function is not skipped, leading to potential issues during the suspend process. The impact of this vulnerability is not yet proven, but it could potentially result in the WLAN device not being properly halted during suspend, leading to unexpected behavior or system instability. The vulnerability has been fixed in Linux Kernel version v5.15.46 by commit c2272428090d0d215a3f017cbbbad731c07eee53.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
In conclusion, a vulnerability has been discovered in the ath10k driver for the Linux Kernel, which could potentially result in unexpected behavior or system instability during the suspend process. It is recommended to update the Linux Kernel to version v5.15.46 or later to fix this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The ath10k driver is a component of the Linux Kernel that provides support for Qualcomm Atheros 802.11ac wireless LAN (WLAN) devices.
The impact of this vulnerability is not yet proven, but it could potentially result in the WLAN device not being properly halted during suspend, leading to unexpected behavior or system instability.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v5.15.46 or later.
The vulnerability has been fixed in Linux Kernel version v5.15.46 by commit c2272428090d0d215a3f017cbbbad731c07eee53. You can find the fix by checking the official Linux Kernel repository.
There is no specific workaround mentioned for this vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.