Resource Allocation Issue in Linux Kernel's ath11k Driver

CVE-2022-50187

What is CVE-2022-50187?

A resource allocation issue in the Linux kernel's ath11k network driver has been identified, where the device registration occurs before the necessary resources are allocated. This oversight can lead to a race condition during the device open process, triggering an internal error that causes system instability. The vulnerability manifests when the 'ath11k_mac_op_start()' function is called prematurely, resulting in a 'BUG_ON()' condition in the timer module. When the timing alters between kernel versions, users may experience consistent probing failures, highlighting the need for timely updates and resource management strategies within the kernel.

References