CVE-2022-50187

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

ath11k: fix netdev open race

Make sure to allocate resources needed before registering the device.

This specifically avoids having a racing open() trigger a BUG_ON() in

mod_timer() when ath11k_mac_op_start() is called before the

mon_reap_timer as been set up.

I did not see this issue with next-20220310, but I hit it on every probe

with next-20220511. Perhaps some timing changed in between.

Here's the backtrace:

[ 51.346947] kernel BUG at kernel/time/timer.c:990!

[ 51.346958] Internal error: Oops - BUG: 0 [#1] PREEMPT SMP

...

[ 51.578225] Call trace:

[ 51.583293] __mod_timer+0x298/0x390

[ 51.589518] mod_timer+0x14/0x20

[ 51.595368] ath11k_mac_op_start+0x41c/0x4a0 [ath11k]

[ 51.603165] drv_start+0x38/0x60 [mac80211]

[ 51.610110] ieee80211_do_open+0x29c/0x7d0 [mac80211]

[ 51.617945] ieee80211_open+0x60/0xb0 [mac80211]

[ 51.625311] __dev_open+0x100/0x1c0

[ 51.631420] __dev_change_flags+0

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References