CVE-2022-49519

A flaw was found in the Linux kernel (ath10k). This vulnerability allows a denial of service via a double free during suspend/resume operations.

This vulnerability is classified as having a Moderate impact for Red Hat Enterprise Linux because exploitation requires local access, specific physical Qualcomm Atheros wireless hardware, and precise timing during an active firmware recovery to trigger system suspend. Enterprise server installations seldom utilize Wi-Fi network cards or power-management suspend states, drastically limiting exposure in production environments. Successful exploitation results in a kernel crash and denial of service, with no risk to data integrity or system confidentiality.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.