In the Linux kernel, the following vulnerability has been resolved:
wifi: ath11k: add srng->lock for ath11k_hal_srng_* in monitor mode
ath11k_hal_srng_* should be used with srng->lock to protect srng data.
For ath11k_dp_rx_mon_dest_process() and ath11k_dp_full_mon_process_rx(), they use ath11k_hal_srng_* for many times but never call srng->lock.
So when running (full) monitor mode, warning will occur: RIP: 0010:ath11k_hal_srng_dst_peek+0x18/0x30 [ath11k] Call Trace: ? ath11k_hal_srng_dst_peek+0x18/0x30 [ath11k] ath11k_dp_rx_process_mon_status+0xc45/0x1190 [ath11k] ? idr_alloc_u32+0x97/0xd0 ath11k_dp_rx_process_mon_rings+0x32a/0x550 [ath11k] ath11k_dp_service_srng+0x289/0x5a0 [ath11k] ath11k_pcic_ext_grp_napi_poll+0x30/0xd0 [ath11k] __napi_poll+0x30/0x1f0 net_rx_action+0x198/0x320 __do_softirq+0xdd/0x319
So add srng->lock for them to avoid such warnings.
Inorder to fetch the srng->lock, should change srng's definition from 'void' to 'struct hal_srng'. And initialize them elsewhere to prevent one line of code from being too long. This is consistent with other ring process functions, such as ath11k_dp_process_rx().
Tested-on: WCN6855 hw2.0 PCI WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.30 Tested-on: QCN9074 hw1.0 PCI WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 15, 2025 | Apr 16, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Mar 25, 2026 | Apr 16, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 16, 2025 |
| Ubuntu | — | Upgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1058-gcp-64kUpgrade linux-image-6.8.0-2045-raspi-realtimeUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-6.8.0-117-generic-64kUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-nvidia-6.8Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-lowlatency-6.8Upgrade linux-image-6.8.0-117-lowlatency-64kUpgrade linux-image-realtimeUpgrade linux-image-gkeUpgrade linux-image-gkeopUpgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-6.8.0-1055-awsUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-intel-iotgUpgrade linux-image-6.8.1-1051-realtimeUpgrade linux-image-aws-fipsUpgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-xilinx-6.8Upgrade linux-image-6.8.0-116-fipsUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-gke-64k-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-raspiUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-117-genericUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.8.0-1054-nvidiaUpgrade linux-image-fipsUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-tegraUpgrade linux-image-realtime-6.8.1Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1054-nvidia-64kUpgrade linux-image-raspi-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-genericUpgrade linux-image-virtual-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-117-lowlatencyUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1058-gcp-fipsUpgrade linux-image-6.8.0-1055-ibmUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1056-azureUpgrade linux-image-6.8.0-1032-xilinxUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-azureUpgrade linux-image-6.8.0-1056-raspiUpgrade linux-image-gke-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1055-aws-fipsUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1054-gkeUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-6.8.0-1041-gkeopUpgrade linux-image-azure-lts-24.04Upgrade linux-image-fips-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-azure-fips-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-6.14.0-22-genericUpgrade linux-image-oracle-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-azure-fipsUpgrade linux-image-kvmUpgrade linux-image-awsUpgrade linux-image-ibmUpgrade linux-image-generic-6.8Upgrade linux-image-6.8.0-1058-gcpUpgrade linux-image-6.8.0-1054-gke-64kUpgrade linux-image-gcp-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1024-nvidia-tegra-rtUpgrade linux-image-azure-fdeUpgrade linux-image-6.14.0-1007-awsUpgrade linux-image-aws-64k-6.8Upgrade linux-image-oracleUpgrade linux-image-gkeop-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-ibm-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1059-azureUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1054-nvidia-lowlatencyUpgrade linux-image-6.8.0-1024-nvidia-tegraUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1055-aws-64kUpgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1059-azure-fipsUpgrade linux-image-aws-fips-6.8Upgrade linux-image-aws-64kUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-6.8.0-1054-nvidia-lowlatency-64kUpgrade linux-image-xilinxUpgrade linux-image-virtualUpgrade linux-image-ibm-classic | Jun 26, 2025 | Apr 16, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 17, 2026 | Apr 16, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub