In the Linux kernel, the following vulnerability has been resolved:
wifi: ath12k: change DMA direction while mapping reinjected packets
For fragmented packets, ath12k reassembles each fragment as a normal packet and then reinjects it into HW ring. In this case, the DMA direction should be DMA_TO_DEVICE, not DMA_FROM_DEVICE. Otherwise, an invalid payload may be reinjected into the HW and subsequently delivered to the host.
Given that arbitrary memory can be allocated to the skb buffer, knowledge about the data contained in the reinjected buffer is lacking. Consequently, there’s a risk of private information being leaked.
Tested-on: QCN9274 hw2.0 PCI WLAN.WBE.1.1.1-00209-QCAHKSWPL_SILICONZ-1
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Suse | — | Upgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt-extraUpgrade ocfs2-kmp-64kbUpgrade kernel-default-develUpgrade kernel-azure-optionalUpgrade kernel-default-livepatchUpgrade kernel-rt-vdsoUpgrade kernel-source-rtUpgrade kernel-rt_debug-develUpgrade ocfs2-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-debug-vdsoUpgrade kernel-azure-extraUpgrade gfs2-kmp-azureUpgrade cluster-md-kmp-rtUpgrade kernel-rt_debugUpgrade ocfs2-kmp-azureUpgrade kernel-kvmsmall-develUpgrade cluster-md-kmp-azureUpgrade kernel-syms-azureUpgrade kselftests-kmp-64kbUpgrade dtb-alteraUpgrade dtb-amazonUpgrade dtb-caviumUpgrade dtb-appleUpgrade dtb-allwinnerUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-source-vanillaUpgrade kernel-64kbUpgrade kselftests-kmp-azureUpgrade kernel-docs-htmlUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-azureUpgrade dtb-freescaleUpgrade kernel-devel-azureUpgrade dtb-amdUpgrade kernel-64kb-extraUpgrade dlm-kmp-64kbUpgrade kernel-rt-optionalUpgrade kernel-azure-develUpgrade dtb-exynosUpgrade kernel-azureUpgrade kernel-obs-buildUpgrade dtb-sprdUpgrade kernel-debug-develUpgrade dtb-hisiliconUpgrade kernel-sourceUpgrade gfs2-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade dtb-marvellUpgrade kernel-default-vdsoUpgrade kernel-64kb-optionalUpgrade dtb-broadcomUpgrade dtb-lgUpgrade dtb-qcomUpgrade kernel-default-livepatch-develUpgrade kernel-default-optionalUpgrade gfs2-kmp-64kbUpgrade kernel-kvmsmallUpgrade kernel-macrosUpgrade kernel-azure-livepatch-develUpgrade kernel-defaultUpgrade kernel-64kb-livepatch-develUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-debugUpgrade dtb-xilinxUpgrade dtb-rockchipUpgrade kernel-develUpgrade dtb-nvidiaUpgrade kernel-rt-develUpgrade dtb-amlogicUpgrade reiserfs-kmp-azureUpgrade kernel-default-baseUpgrade dlm-kmp-rtUpgrade dtb-apmUpgrade dtb-socionextUpgrade kernel-rt_debug-vdsoUpgrade kernel-docsUpgrade dtb-mediatekUpgrade kernel-64kb-develUpgrade kernel-devel-rtUpgrade kernel-obs-qaUpgrade kselftests-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade kernel-rtUpgrade ocfs2-kmp-rtUpgrade gfs2-kmp-rtUpgrade kselftests-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-symsUpgrade kernel-azure-vdsoUpgrade kernel-syms-rtUpgrade kernel-debug-livepatch-develUpgrade dtb-renesasUpgrade dtb-armUpgrade cluster-md-kmp-defaultUpgrade kernel-default-extraUpgrade dlm-kmp-azure | Dec 5, 2025 | Sep 10, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-azureUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-oem-22.04dUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-oem-22.04Upgrade linux-image-oem-24.04aUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-gkeopUpgrade linux-image-6.8.0-1020-azureUpgrade linux-image-generic-64kUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-ibmUpgrade linux-image-oem-22.04aUpgrade linux-image-lowlatencyUpgrade linux-image-gkeop-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-raspiUpgrade linux-image-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-oracle-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-50-genericUpgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1020-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-kvmUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oem-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-awsUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-hwe-22.04 | Dec 13, 2024 | Aug 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub