ath11k: fix netdev open race

{
  "id": "5f5233e0b4616197c4c9e837b88cc2b55d947c365468ab82667ef8dd7010e8bb",
  "url": "https://osv.dev/vulnerability/CVE-2022-50187",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "ath11k: fix netdev open race",
    "summary": "In the Linux kernel, the following vulnerability has been resolved: ath11k: fix netdev open race Make sure to allocate resources needed before registering the device. This specifically avoids having a racing open() trigger a BUG_ON() in mod_timer() when ath11k_mac_op_start() is called before the mon_reap_timer as been set up. I did not see this issue with next-20220310, but I hit it on every probe with next-20220511. Perhaps some timing changed in between. Here's the backtrace: [ 51.346947] kernel BUG at kernel/time/timer.c:990! [ 51.346958] Internal error: Oops - BUG: 0 [#1] PREEMPT SMP ... [ 51.578225] Call trace: [ 51.583293] __mod_timer+0x298/0x390 [ 51.589518] mod_timer+0x14/0x20 [ 51.595368] ath11k_mac_op_start+0x41c/0x4a0 [ath11k] [ 51.603165] drv_start+0x38/0x60 [mac80211] [ 51.610110] ieee80211_do_open+0x29c/0x7d0 [mac80211] [ 51.617945] ieee80211_open+0x60/0xb0 [mac80211] [ 51.625311] __dev_open+0x100/0x1c0 [ 51.631420] __dev_change_flags+0x194/0x210 [ 51.638214] dev_change_flags+0x24/0x70 [ 51.644646] do_setlink+0x228/0xdb0 [ 51.650723] __rtnl_newlink+0x460/0x830 [ 51.657162] rtnl_newlink+0x4c/0x80 [ 51.663229] rtnetlink_rcv_msg+0x124/0x390 [ 51.669917] netlink_rcv_skb+0x58/0x130 [ 51.676314] rtnetlink_rcv+0x18/0x30 [ 51.682460] netlink_unicast+0x250/0x310 [ 51.688960] netlink_sendmsg+0x19c/0x3e0 [ 51.695458] ____sys_sendmsg+0x220/0x290 [ 51.701938] ___sys_sendmsg+0x7c/0xc0 [ 51.708148] __sys_sendmsg+0x68/0xd0 [ 51.714254] __arm64_sys_sendmsg+0x28/0x40 [ 51.720900]",
    "evidence": "osv:CVE-2022-50187",
    "products": [
      {
        "name": {
          "value": "Kernel",
          "evidence": "/affected/1/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "5.10.137",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "5.15.61",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "5.18.18",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "5.19.2",
            "evidence": "/affected/1/ranges"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "unknown",
    "structured": {
      "id": "CVE-2022-50187",
      "aliases": [
        "CVE-2022-50187"
      ],
      "affected": [
        {
          "ranges": [
            {
              "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
              "type": "GIT",
              "events": [
                {
                  "introduced": "d5c65159f2895379e11ca13f62feabe93278985d"
                },
                {
                  "fixed": "a2c45f8c3d18269e641f0c7da2dde47ef8414034"
                },
                {
                  "fixed": "eaff3946a86fc63280a30158a4ae1e141449817c"
                },
                {
                  "fixed": "abb7dc8fbb27c15dcc927df56190f3c5ede58bd5"
                },
                {
                  "fixed": "307ce58270b3b50ca21cfcc910568429b06803f7"
                },
                {
                  "fixed": "d4ba1ff87b17e81686ada8f429300876f55f95ad"
                }
              ]
            }
          ],
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-50187.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "5.6.0"
                },
                {
                  "fixed": "5.10.137"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "5.11.0"
                },
                {
                  "fixed": "5.15.61"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "5.16.0"
                },
                {
                  "fixed": "5.18.18"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "5.19.0"
                },
                {
                  "fixed": "5.19.2"
                }
              ]
            }
          ],
          "package": {
            "name": "Kernel",
            "ecosystem": "Linux"
          },
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-50187.json"
          }
        }
      ],
      "modified": "2026-10-28T02:30:48.868663665Z",
      "provider": "osv",
      "references": [
        "https://git.kernel.org/stable/c/307ce58270b3b50ca21cfcc910568429b06803f7",
        "https://git.kernel.org/stable/c/a2c45f8c3d18269e641f0c7da2dde47ef8414034",
        "https://git.kernel.org/stable/c/abb7dc8fbb27c15dcc927df56190f3c5ede58bd5",
        "https://git.kernel.org/stable/c/d4ba1ff87b17e81686ada8f429300876f55f95ad",
        "https://git.kernel.org/stable/c/eaff3946a86fc63280a30158a4ae1e141449817c",
        "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50187.json",
        "https://nvd.nist.gov/vuln/detail/CVE-2022-50187",
        "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
      ],
      "provider_metadata": {
        "cna_assigner": "Linux",
        "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50187.json"
      }
    },
    "related_cves": [
      {
        "value": "CVE-2022-50187",
        "evidence": "/id"
      }
    ],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "core-osv",
  "document_id": 516788,
  "published_at": "2025-06-18T11:03:34.265+00:00"
}