In the Linux kernel, the following vulnerability has been resolved:
wifi: ath12k: fix firmware crash due to invalid peer nss
Currently, if the access point receives an association request containing an Extended HE Capabilities Information Element with an invalid MCS-NSS, it triggers a firmware crash.
This issue arises when EHT-PHY capabilities shows support for a bandwidth and MCS-NSS set for that particular bandwidth is filled by zeros and due to this, driver obtains peer_nss as 0 and sending this value to firmware causes crash.
Address this issue by implementing a validation step for the peer_nss value before passing it to the firmware. If the value is greater than zero, proceed with forwarding it to the firmware. However, if the value is invalid, reject the association request to prevent potential firmware crashes.
Tested-on: QCN9274 hw2.0 PCI WLAN.WBE.1.0.1-00029-QCAHKSWPL_SILICONZ-1
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Suse | — | Upgrade kernel-default-baseUpgrade dlm-kmp-rtUpgrade kernel-default-livepatch-develUpgrade dtb-freescaleUpgrade kernel-source-vanillaUpgrade dtb-allwinnerUpgrade kernel-64kb-optionalUpgrade dtb-nvidiaUpgrade kernel-debugUpgrade dtb-amdUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-rtUpgrade kernel-develUpgrade kernel-rt-livepatch-develUpgrade kernel-rt_debugUpgrade dtb-renesasUpgrade kernel-64kb-extraUpgrade dtb-appleUpgrade gfs2-kmp-azureUpgrade kernel-debug-develUpgrade kernel-rt_debug-livepatch-develUpgrade gfs2-kmp-defaultUpgrade kernel-64kb-develUpgrade dlm-kmp-azureUpgrade dlm-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade dtb-marvellUpgrade kernel-docsUpgrade dtb-amazonUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-default-livepatchUpgrade kernel-docs-htmlUpgrade kernel-debug-vdsoUpgrade kernel-syms-rtUpgrade dtb-hisiliconUpgrade dtb-sprdUpgrade kernel-azureUpgrade ocfs2-kmp-azureUpgrade kernel-azure-extraUpgrade kernel-default-develUpgrade dtb-socionextUpgrade kernel-source-rtUpgrade kernel-defaultUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade dtb-broadcomUpgrade dtb-xilinxUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade dtb-caviumUpgrade kernel-symsUpgrade kernel-rt_debug-develUpgrade dtb-mediatekUpgrade cluster-md-kmp-defaultUpgrade kernel-source-azureUpgrade gfs2-kmp-rtUpgrade dtb-rockchipUpgrade dtb-exynosUpgrade kernel-macrosUpgrade kernel-devel-rtUpgrade kernel-azure-livepatch-develUpgrade kernel-kvmsmallUpgrade kselftests-kmp-azureUpgrade kernel-rt-develUpgrade kernel-devel-azureUpgrade kernel-default-extraUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade kernel-rt-extraUpgrade kernel-default-vdsoUpgrade kernel-default-optionalUpgrade dtb-armUpgrade kernel-rt-optionalUpgrade kernel-obs-buildUpgrade ocfs2-kmp-rtUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmall-develUpgrade kernel-azure-optionalUpgrade kernel-64kbUpgrade dtb-apmUpgrade kernel-azure-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-azureUpgrade dtb-lgUpgrade kernel-azure-develUpgrade kselftests-kmp-64kbUpgrade kernel-sourceUpgrade kernel-rtUpgrade kernel-obs-qaUpgrade kernel-zfcpdumpUpgrade dtb-amlogicUpgrade dtb-qcomUpgrade dtb-alteraUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-64kbUpgrade kernel-syms-azure | Dec 5, 2025 | Nov 13, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1018-oemUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-oem-22.04aUpgrade linux-image-azureUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-awsUpgrade linux-image-nvidia-6.8Upgrade linux-image-raspiUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1020-awsUpgrade linux-image-azure-fdeUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-kvmUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-ibm-classicUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-gkeopUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-nvidiaUpgrade linux-image-oracleUpgrade linux-image-oem-24.04aUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-6.8.0-1020-azureUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-oem-22.04cUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-genericUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-24.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-oracle-64kUpgrade linux-image-generic-64k | Dec 13, 2024 | Sep 27, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub