CVE-2022-50627

A null pointer dereference vulnerability was found in the ath11k wireless driver in the Linux kernel. When an interface is brought up in monitor mode, the driver attempts to extract packet type from RAW monitor ring packets, which lack the expected structure. This causes a kernel crash due to dereferencing a null pointer during SKB processing.

This flaw requires local access and specific hardware (Qualcomm ath11k-based WiFi adapters like QCN9074). Monitor mode is typically used for network analysis and requires elevated privileges to enable.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the ath11k module from being loaded. See https://access.redhat.com/solutions/41278 for instructions.