In the Linux kernel, the following vulnerability has been resolved:
wifi: ath11k: add srng->lock for ath11k_hal_srng_* in monitor mode
ath11k_hal_srng_* should be used with srng->lock to protect srng data.
For ath11k_dp_rx_mon_dest_process() and ath11k_dp_full_mon_process_rx(), they use ath11k_hal_srng_* for many times but never call srng->lock.
So when running (full) monitor mode, warning will occur: RIP: 0010:ath11k_hal_srng_dst_peek+0x18/0x30 [ath11k] Call Trace: ? ath11k_hal_srng_dst_peek+0x18/0x30 [ath11k] ath11k_dp_rx_process_mon_status+0xc45/0x1190 [ath11k] ? idr_alloc_u32+0x97/0xd0 ath11k_dp_rx_process_mon_rings+0x32a/0x550 [ath11k] ath11k_dp_service_srng+0x289/0x5a0 [ath11k] ath11k_pcic_ext_grp_napi_poll+0x30/0xd0 [ath11k] __napi_poll+0x30/0x1f0 net_rx_action+0x198/0x320 __do_softirq+0xdd/0x319
So add srng->lock for them to avoid such warnings.
Inorder to fetch the srng->lock, should change srng's definition from 'void' to 'struct hal_srng'. And initialize them elsewhere to prevent one line of code from being too long. This is consistent with other ring process functions, such as ath11k_dp_process_rx().
Tested-on: WCN6855 hw2.0 PCI WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.30 Tested-on: QCN9074 hw1.0 PCI WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxNo solution exists | May 15, 2025 | Apr 16, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Mar 25, 2026 | Apr 16, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 16, 2025 |
| Ubuntu | — | Upgrade linux-image-oracle-64kUpgrade linux-image-6.14.0-22-genericUpgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-azure-fipsUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1024-nvidia-tegra-rtUpgrade linux-image-generic-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-ibmUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.8.0-1054-gke-64kUpgrade linux-image-6.8.0-1058-gcpUpgrade linux-image-awsUpgrade linux-image-aws-lts-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-gcp-6.8Upgrade linux-image-6.14.0-1007-awsUpgrade linux-image-6.8.0-1024-nvidia-tegraUpgrade linux-image-ibm-6.8Upgrade linux-image-6.8.0-1054-nvidia-lowlatencyUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1059-azureUpgrade linux-image-oracleUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-xilinxUpgrade linux-image-ibm-classicUpgrade linux-image-gke-6.8Upgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-generic-64k-6.8Upgrade linux-image-virtualUpgrade linux-image-aws-fips-6.8Upgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-6.8.0-1054-nvidia-lowlatency-64kUpgrade linux-image-azure-fips-6.8Upgrade linux-image-aws-64kUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-fips-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1059-azure-fipsUpgrade linux-image-6.8.0-1055-aws-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1041-gkeopUpgrade linux-image-kvmUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-nvidia-tegraUpgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-azureUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-fipsUpgrade linux-image-6.8.0-1054-gkeUpgrade linux-image-6.8.0-1054-nvidiaUpgrade linux-image-gkeopUpgrade linux-image-gke-64kUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1055-ibmUpgrade linux-image-6.8.0-1055-aws-fipsUpgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-6.8.0-117-genericUpgrade linux-image-6.8.0-1054-nvidia-64kUpgrade linux-image-genericUpgrade linux-image-6.8.0-1058-gcp-fipsUpgrade linux-image-gcp-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-gkeUpgrade linux-image-6.8.0-117-generic-64kUpgrade linux-image-realtimeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-6.8.0-117-lowlatency-64kUpgrade linux-image-lowlatency-6.8Upgrade linux-image-6.8.0-1056-raspiUpgrade linux-image-virtual-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-117-lowlatencyUpgrade linux-image-6.8.0-1058-gcp-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-6.8.0-116-fipsUpgrade linux-image-generic-64kUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-intel-iotgUpgrade linux-image-generic-lpaeUpgrade linux-image-gcp-fipsUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.1-1051-realtimeUpgrade linux-image-gke-64k-6.8Upgrade linux-image-raspiUpgrade linux-image-realtime-6.8.1Upgrade linux-image-xilinx-6.8Upgrade linux-image-aws-fipsUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-6.8.0-2045-raspi-realtimeUpgrade linux-image-6.8.0-1055-awsUpgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-1056-azureUpgrade linux-image-6.8.0-1032-xilinxUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-nvidia-64k-6.8 | Jun 26, 2025 | Apr 16, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 17, 2026 | Apr 16, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub