In the Linux kernel, the following vulnerability has been resolved:
wifi: ath12k: fix uaf in ath12k_core_init()
When the execution of ath12k_core_hw_group_assign() or ath12k_core_hw_group_create() fails, the registered notifier chain is not unregistered properly. Its memory is freed after rmmod, which may trigger to a use-after-free (UAF) issue if there is a subsequent access to this notifier chain.
Fixes the issue by calling ath12k_core_panic_notifier_unregister() in failure cases.
Call trace: notifier_chain_register+0x4c/0x1f0 (P) atomic_notifier_chain_register+0x38/0x68 ath12k_core_init+0x50/0x4e8 [ath12k] ath12k_pci_probe+0x5f8/0xc28 [ath12k] pci_device_probe+0xbc/0x1a8 really_probe+0xc8/0x3a0 __driver_probe_device+0x84/0x1b0 driver_probe_device+0x44/0x130 __driver_attach+0xcc/0x208 bus_for_each_dev+0x84/0x100 driver_attach+0x2c/0x40 bus_add_driver+0x130/0x260 driver_register+0x70/0x138 __pci_register_driver+0x68/0x80 ath12k_pci_init+0x30/0x68 [ath12k] ath12k_init+0x28/0x78 [ath12k]
Tested-on: WCN7850 hw2.0 PCI WLAN.HMT.1.0.c5-00481-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-64k-modules-coreUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-64k-modules-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debug-modules-coreUpgrade kernel-modules-extraUpgrade kernel-64k-debug-develUpgrade kernel-debug-uki-virtUpgrade kernel-debugUpgrade kernel-zfcpdump-develUpgrade kernel-debug-modulesUpgrade kernel-rt-modulesUpgrade kernel-64k-modules-extraUpgrade kernel-rt-develUpgrade kernel-debug-coreUpgrade kernel-coreUpgrade kernel-modulesUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-64k-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-coreUpgrade kernel-64k-debug-modules-coreUpgrade kernel-64k-modulesUpgrade kernel-rt-64k-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-64kUpgrade kernel-rt-debug-coreUpgrade kernel-rt-64k-develUpgrade kernel-uki-virtUpgrade kernel-rt-debug-modulesUpgrade rtlaUpgrade kernel-debug-modules-extraUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-debug-develUpgrade kernel-rt-debugUpgrade kernel-debug-develUpgrade kernel-rt-64k-debugUpgrade kernelUpgrade kernel-rt-64k-modulesUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-debug-devel-matchedUpgrade kernel-rtUpgrade kernel-rt-modules-coreUpgrade kernel-rt-64kUpgrade kernel-64k-devel-matchedUpgrade kernel-abi-stablelistsUpgrade kernel-64k-coreUpgrade kernel-rt-64k-debug-coreUpgrade kernel-rt-64k-modules-extraUpgrade rvUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-devel-matchedUpgrade kernel-cross-headersUpgrade libperfUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-tools-libs-develUpgrade kernel-64k-debug-modules-extraUpgrade kernel-toolsUpgrade perfUpgrade python3-perfUpgrade kernel-64k-debugUpgrade kernel-rt-modules-extraUpgrade kernel-uki-virt-addonsUpgrade kernel-64k-debug-coreUpgrade kernel-headersUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-modules-coreUpgrade kernel-docUpgrade kernel-rt-64k-debug-devel | Nov 20, 2025 | Nov 11, 2025 |
| Oracle_linux | — | Upgrade kernel | Nov 28, 2025 | Jul 3, 2025 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Jul 9, 2025 | Jul 3, 2025 |
| Rocky_linux | — | Upgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debug-modules-coreUpgrade kernel-toolsUpgrade kernel-zfcpdump-coreUpgrade kernel-devel-matchedUpgrade kernel-rt-debuginfoUpgrade kernel-debug-devel-matchedUpgrade libperf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-zfcpdump-modules-coreUpgrade kernel-rtUpgrade kernel-rt-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-debuginfo-common-s390xUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libs-develUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-modulesUpgrade libperfUpgrade kernel-uki-virt-addonsUpgrade rvUpgrade kernel-rt-modules-coreUpgrade python3-perfUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-modules-coreUpgrade kernel-rt-coreUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdumpUpgrade kernel-rt-develUpgrade kernel-modulesUpgrade kernel-debug-modules-coreUpgrade kernel-debug-modulesUpgrade perfUpgrade kernel-rt-debug-debuginfoUpgrade kernel-zfcpdump-develUpgrade kernel-debug-coreUpgrade perf-debuginfoUpgrade kernel-tools-libsUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-rt-debug-modulesUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debugUpgrade python3-perf-debuginfoUpgrade kernel-modules-extraUpgrade kernel-debug-uki-virtUpgrade kernel-modules-extra-matchedUpgrade kernel-debugUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-debuginfoUpgrade kernel-coreUpgrade rtlaUpgrade kernel-debuginfoUpgrade kernel-uki-virtUpgrade kernel-devel | Feb 5, 2026 | Nov 21, 2025 |
| Ubuntu | — | Upgrade linux-image-oem-24.04Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-6.14.0-32-genericUpgrade linux-image-oem-24.04aUpgrade linux-image-oracle-64kUpgrade linux-image-virtual-6.14Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-virtualUpgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-oem-24.04cUpgrade linux-image-aws-64kUpgrade linux-image-aws-64k-6.14Upgrade linux-image-oem-24.04bUpgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-gcpUpgrade linux-image-oem-6.14Upgrade linux-image-oracleUpgrade linux-image-generic-64k-6.14Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-awsUpgrade linux-image-6.14.0-1012-oemUpgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-oracle-6.14Upgrade linux-image-gcp-6.14Upgrade linux-image-generic-64kUpgrade linux-image-azure-6.14Upgrade linux-image-6.14.0-1013-awsUpgrade linux-image-6.14.0-1012-azureUpgrade linux-image-realtimeUpgrade linux-image-raspi-6.14Upgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-genericUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-aws-6.14Upgrade linux-image-generic-6.14Upgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-azureUpgrade linux-image-raspiUpgrade linux-image-gcp-64kUpgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-realtime-6.14 | Jul 7, 2025 | Jul 3, 2025 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub