In the Linux kernel, the following vulnerability has been resolved:
wifi: ath12k: fix uaf in ath12k_core_init()
When the execution of ath12k_core_hw_group_assign() or ath12k_core_hw_group_create() fails, the registered notifier chain is not unregistered properly. Its memory is freed after rmmod, which may trigger to a use-after-free (UAF) issue if there is a subsequent access to this notifier chain.
Fixes the issue by calling ath12k_core_panic_notifier_unregister() in failure cases.
Call trace: notifier_chain_register+0x4c/0x1f0 (P) atomic_notifier_chain_register+0x38/0x68 ath12k_core_init+0x50/0x4e8 [ath12k] ath12k_pci_probe+0x5f8/0xc28 [ath12k] pci_device_probe+0xbc/0x1a8 really_probe+0xc8/0x3a0 __driver_probe_device+0x84/0x1b0 driver_probe_device+0x44/0x130 __driver_attach+0xcc/0x208 bus_for_each_dev+0x84/0x100 driver_attach+0x2c/0x40 bus_add_driver+0x130/0x260 driver_register+0x70/0x138 __pci_register_driver+0x68/0x80 ath12k_pci_init+0x30/0x68 [ath12k] ath12k_init+0x28/0x78 [ath12k]
Tested-on: WCN7850 hw2.0 PCI WLAN.HMT.1.0.c5-00481-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-docUpgrade kernel-64k-debug-coreUpgrade kernel-uki-virt-addonsUpgrade perfUpgrade kernel-rt-modules-coreUpgrade kernel-rt-64k-modules-extraUpgrade kernel-rtUpgrade kernelUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-64k-debug-develUpgrade libperfUpgrade kernel-devel-matchedUpgrade kernel-toolsUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-64k-debugUpgrade kernel-64k-debug-devel-matchedUpgrade python3-perfUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-64k-debug-coreUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-64kUpgrade rvUpgrade kernel-headersUpgrade kernel-cross-headersUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-modules-extraUpgrade kernel-rt-64k-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-modules-coreUpgrade kernel-64k-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-coreUpgrade kernel-debug-modules-extraUpgrade kernel-64k-debug-modulesUpgrade kernel-debug-modules-coreUpgrade kernel-64k-develUpgrade kernel-zfcpdump-devel-matchedUpgrade rtlaUpgrade kernel-develUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-tools-libsUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-rt-64k-coreUpgrade kernel-rt-develUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-rt-debug-develUpgrade kernel-debugUpgrade kernel-64k-debug-develUpgrade kernel-64k-modules-coreUpgrade kernel-uki-virtUpgrade kernel-rt-coreUpgrade kernel-modulesUpgrade kernel-64k-modules-extraUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-modules-extraUpgrade kernel-debug-uki-virtUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debug-develUpgrade kernel-zfcpdumpUpgrade kernel-64k-modulesUpgrade kernel-rt-64k-modules-coreUpgrade kernel-zfcpdump-develUpgrade kernel-rt-64k-debugUpgrade kernel-rt-64k-develUpgrade kernel-64kUpgrade kernel-debug-coreUpgrade kernel-debug-modules | Nov 20, 2025 | Nov 11, 2025 |
| Oracle_linux | — | Upgrade kernel | Nov 28, 2025 | Jul 3, 2025 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Jul 9, 2025 | Jul 3, 2025 |
| Rocky_linux | — | Upgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-devel-matchedUpgrade kernel-debuginfo-common-s390xUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modules-coreUpgrade libperfUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debuginfoUpgrade libperf-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-debug-devel-matchedUpgrade kernel-rtUpgrade kernel-zfcpdump-modulesUpgrade rvUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-coreUpgrade perf-debuginfoUpgrade kernel-tools-libsUpgrade kernel-rt-debug-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debugUpgrade kernel-debug-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-modules-extra-matchedUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-debugUpgrade kernel-coreUpgrade kernel-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-debug-uki-virtUpgrade kernel-debug-debuginfoUpgrade kernel-develUpgrade kernel-debuginfoUpgrade rtlaUpgrade kernel-uki-virtUpgrade kernel-debug-develUpgrade kernel-rt-develUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-modulesUpgrade kernel-debug-modules-coreUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-rt-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-modules-coreUpgrade perfUpgrade python3-perfUpgrade kernel | Feb 5, 2026 | Nov 21, 2025 |
| Ubuntu | — | Upgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-generic-64kUpgrade linux-image-aws-6.14Upgrade linux-image-generic-6.14Upgrade linux-image-genericUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-raspiUpgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-gcp-6.14Upgrade linux-image-oracle-6.14Upgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-realtimeUpgrade linux-image-raspi-6.14Upgrade linux-image-6.14.0-1012-azureUpgrade linux-image-realtime-6.14Upgrade linux-image-6.14.0-1013-awsUpgrade linux-image-azure-6.14Upgrade linux-image-azureUpgrade linux-image-gcp-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-virtual-6.14Upgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-6.14.0-1012-oemUpgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-oem-24.04aUpgrade linux-image-oracle-64kUpgrade linux-image-oem-6.14Upgrade linux-image-6.14.0-32-genericUpgrade linux-image-oem-24.04Upgrade linux-image-awsUpgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-virtualUpgrade linux-image-oem-24.04cUpgrade linux-image-generic-64k-6.14Upgrade linux-image-oracleUpgrade linux-image-oem-24.04bUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-gcpUpgrade linux-image-aws-64k-6.14Upgrade linux-image-aws-64k | Jul 7, 2025 | Jul 3, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub