In the Linux kernel, the following vulnerability has been resolved:
wifi: ath11k: add srng->lock for ath11k_hal_srng_* in monitor mode
ath11k_hal_srng_* should be used with srng->lock to protect srng data.
For ath11k_dp_rx_mon_dest_process() and ath11k_dp_full_mon_process_rx(), they use ath11k_hal_srng_* for many times but never call srng->lock.
So when running (full) monitor mode, warning will occur: RIP: 0010:ath11k_hal_srng_dst_peek+0x18/0x30 [ath11k] Call Trace: ? ath11k_hal_srng_dst_peek+0x18/0x30 [ath11k] ath11k_dp_rx_process_mon_status+0xc45/0x1190 [ath11k] ? idr_alloc_u32+0x97/0xd0 ath11k_dp_rx_process_mon_rings+0x32a/0x550 [ath11k] ath11k_dp_service_srng+0x289/0x5a0 [ath11k] ath11k_pcic_ext_grp_napi_poll+0x30/0xd0 [ath11k] __napi_poll+0x30/0x1f0 net_rx_action+0x198/0x320 __do_softirq+0xdd/0x319
So add srng->lock for them to avoid such warnings.
Inorder to fetch the srng->lock, should change srng's definition from 'void' to 'struct hal_srng'. And initialize them elsewhere to prevent one line of code from being too long. This is consistent with other ring process functions, such as ath11k_dp_process_rx().
Tested-on: WCN6855 hw2.0 PCI WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.30 Tested-on: QCN9074 hw1.0 PCI WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxNo solution exists | May 15, 2025 | Apr 16, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Mar 25, 2026 | Apr 16, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 16, 2025 |
| Ubuntu | — | Upgrade linux-image-realtimeUpgrade linux-image-gcp-64kUpgrade linux-image-aws-6.8Upgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-gkeUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1055-ibmUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-6.8.0-1054-nvidia-64kUpgrade linux-image-nvidia-tegraUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-117-lowlatencyUpgrade linux-image-6.8.0-117-genericUpgrade linux-image-6.8.0-1054-gkeUpgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-genericUpgrade linux-image-6.8.0-1058-gcp-fipsUpgrade linux-image-gke-64kUpgrade linux-image-6.8.0-1055-aws-fipsUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidiaUpgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-6.8.0-1055-awsUpgrade linux-image-lowlatency-6.8Upgrade linux-image-6.8.0-1058-gcp-64kUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-6.8.1-1051-realtimeUpgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-117-lowlatency-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1054-nvidiaUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-fipsUpgrade linux-image-gkeopUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-6.8.0-1056-raspiUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-2045-raspi-realtimeUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-xilinx-6.8Upgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1056-azureUpgrade linux-image-gke-64k-6.8Upgrade linux-image-intel-iotgUpgrade linux-image-realtime-6.8.1Upgrade linux-image-generic-64kUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-raspiUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1032-xilinxUpgrade linux-image-azureUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-6.8.0-116-fipsUpgrade linux-image-virtual-6.8Upgrade linux-image-6.8.0-117-generic-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-azure-fips-6.8Upgrade linux-image-6.14.0-1007-awsUpgrade linux-image-6.8.0-1059-azureUpgrade linux-image-6.14.0-22-genericUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-ibm-classicUpgrade linux-image-generic-64k-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1041-gkeopUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-ibm-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1024-nvidia-tegra-rtUpgrade linux-image-lowlatencyUpgrade linux-image-gkeop-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-azure-fdeUpgrade linux-image-awsUpgrade linux-image-6.8.0-1054-nvidia-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-6.8.0-1059-azure-fipsUpgrade linux-image-nvidia-64kUpgrade linux-image-fips-6.8Upgrade linux-image-kvmUpgrade linux-image-gcpUpgrade linux-image-generic-6.8Upgrade linux-image-6.8.0-1058-gcpUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1054-gke-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-gcp-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1055-aws-64kUpgrade linux-image-gke-6.8Upgrade linux-image-virtualUpgrade linux-image-xilinxUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1024-nvidia-tegraUpgrade linux-image-6.8.0-1054-nvidia-lowlatency-64kUpgrade linux-image-aws-fips-6.8Upgrade linux-image-aws-64k | Jun 26, 2025 | Apr 16, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 17, 2026 | Apr 16, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub