In the Linux kernel, the following vulnerability has been resolved:
wifi: ath12k: fix out-of-bound access of qmi_invoke_handler()
Currently, there is no terminator entry for ath12k_qmi_msg_handlers hence facing below KASAN warning,
================================================================== BUG: KASAN: global-out-of-bounds in qmi_invoke_handler+0xa4/0x148 Read of size 8 at addr ffffffd00a6428d8 by task kworker/u8:2/1273
CPU: 0 PID: 1273 Comm: kworker/u8:2 Not tainted 5.4.213 #0 Workqueue: qmi_msg_handler qmi_data_ready_work Call trace: dump_backtrace+0x0/0x20c show_stack+0x14/0x1c dump_stack+0xe0/0x138 print_address_description.isra.5+0x30/0x330 __kasan_report+0x16c/0x1bc kasan_report+0xc/0x14 __asan_load8+0xa8/0xb0 qmi_invoke_handler+0xa4/0x148 qmi_handle_message+0x18c/0x1bc qmi_data_ready_work+0x4ec/0x528 process_one_work+0x2c0/0x440 worker_thread+0x324/0x4b8 kthread+0x210/0x228 ret_from_fork+0x10/0x18
The address belongs to the variable: ath12k_mac_mon_status_filter_default+0x4bd8/0xfffffffffffe2300 [ath12k] [...] ==================================================================
Add a dummy terminator entry at the end to assist the qmi_invoke_handler() in traversing up to the terminator entry without accessing an out-of-boundary index.
Tested-on: QCN9274 hw2.0 PCI WLAN.WBE.1.0.1-00029-QCAHKSWPL_SILICONZ-1
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Suse | — | Upgrade dtb-exynosUpgrade dtb-rockchipUpgrade cluster-md-kmp-rtUpgrade kernel-default-vdsoUpgrade kernel-source-vanillaUpgrade ocfs2-kmp-azureUpgrade dtb-broadcomUpgrade dtb-alteraUpgrade dtb-allwinnerUpgrade dtb-caviumUpgrade dtb-lgUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade dtb-marvellUpgrade kernel-docs-htmlUpgrade dtb-freescaleUpgrade kernel-rt-vdsoUpgrade ocfs2-kmp-defaultUpgrade kernel-default-livepatchUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-optionalUpgrade dtb-amazonUpgrade dtb-renesasUpgrade kernel-obs-buildUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-rtUpgrade kernel-azure-optionalUpgrade kernel-rt-extraUpgrade kernel-develUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-sprdUpgrade dlm-kmp-64kbUpgrade kernel-defaultUpgrade kselftests-kmp-azureUpgrade kernel-rt_debug-develUpgrade dtb-appleUpgrade kernel-source-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-livepatch-develUpgrade kernel-azureUpgrade kernel-azure-extraUpgrade kernel-64kb-extraUpgrade kselftests-kmp-64kbUpgrade kernel-rt_debugUpgrade kernel-source-rtUpgrade gfs2-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade dtb-nvidiaUpgrade kernel-debug-vdsoUpgrade kernel-default-baseUpgrade kernel-default-base-rebuildUpgrade kernel-64kbUpgrade kernel-rtUpgrade dtb-xilinxUpgrade kernel-symsUpgrade kernel-rt_debug-vdsoUpgrade kernel-kvmsmallUpgrade cluster-md-kmp-azureUpgrade kernel-devel-rtUpgrade kernel-debugUpgrade ocfs2-kmp-rtUpgrade kernel-sourceUpgrade dtb-hisiliconUpgrade dtb-amlogicUpgrade kernel-azure-vdsoUpgrade kernel-obs-qaUpgrade dtb-apmUpgrade kernel-devel-azureUpgrade dtb-mediatekUpgrade kernel-macrosUpgrade reiserfs-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-kvmsmall-develUpgrade dtb-armUpgrade kernel-rt-develUpgrade dlm-kmp-azureUpgrade kselftests-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-azure-livepatch-develUpgrade dtb-qcomUpgrade kernel-default-optionalUpgrade kernel-docsUpgrade kselftests-kmp-defaultUpgrade dtb-socionextUpgrade kernel-syms-azureUpgrade kernel-debug-livepatch-develUpgrade gfs2-kmp-64kbUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-64kb-livepatch-develUpgrade reiserfs-kmp-azureUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-rtUpgrade kernel-debug-develUpgrade kernel-azure-develUpgrade kernel-64kb-develUpgrade dtb-amdUpgrade kernel-rt-livepatch-develUpgrade kernel-default-develUpgrade kernel-default-extra | Jul 23, 2024 | Jun 19, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-awsUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-oem-24.04aUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-oracle-64kUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-oracleUpgrade linux-image-gcpUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-generic-64kUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-azureUpgrade linux-image-azure-fdeUpgrade linux-image-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-ibmUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-6.8.0-40-lowlatency | Aug 9, 2024 | Jun 19, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub