Vulnerability in ath11k: pci Package - Crash on Suspend if Board File is Not Found
Summary
GSD-2022-1001411: ath11k: pci: fix crash on suspend if board file is not found. Affects Kernel versions < f3c5ef433da82d257337424b3647ce9dcb37d4b5. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The ath11k: pci package is a component of the Linux Kernel that provides support for Qualcomm Atheros 802.11ax wireless devices. It includes drivers and firmware for these devices, allowing them to connect to wireless networks and communicate with other devices. The package is widely used in Linux-based systems that utilize Qualcomm Atheros wireless hardware. However, a vulnerability has been discovered in the package that can cause a crash on system suspend if the required board file is not found.
Vulnerability Detail
The vulnerability in the ath11k: pci package occurs when the system attempts to suspend but fails to find the necessary board file. This can lead to a crash, resulting in a system failure or instability. The vulnerability has the potential to disrupt normal system operation and may cause data loss or other adverse effects. It is important to note that the impact and attack plausibility of this vulnerability have not been proven. The vulnerability has been addressed in the Linux Kernel version v5.16.20 by commit f3c5ef433da82d257337424b3647ce9dcb37d4b5.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
If updating the Linux Kernel is not immediately feasible, a possible workaround is to ensure that the required board file is present before attempting to suspend the system. This can be done by manually copying the board file to the appropriate location or by configuring the system to automatically load the board file during startup. The specific steps for implementing this workaround may vary depending on the system configuration and the location of the board file.
Conclusion
In conclusion, the ath11k: pci package in the Linux Kernel is vulnerable to a crash on system suspend if the required board file is not found. This vulnerability can be mitigated by updating the Linux Kernel to version v5.16.20 or later. Alternatively, a workaround involving the presence of the board file can be implemented. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The ath11k: pci package is a component of the Linux Kernel that provides support for Qualcomm Atheros 802.11ax wireless devices.
The vulnerability can cause a crash on system suspend if the required board file is not found, potentially leading to system failure or instability.
No, the impact and attack plausibility of this vulnerability have not been proven.
To fix this vulnerability, update the Linux Kernel to version v5.16.20 or later.
Yes, a possible workaround is to ensure that the required board file is present before attempting to suspend the system.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
