In the Linux kernel, the following vulnerability has been resolved:
wifi: ath12k: fix uaf in ath12k_core_init()
When the execution of ath12k_core_hw_group_assign() or ath12k_core_hw_group_create() fails, the registered notifier chain is not unregistered properly. Its memory is freed after rmmod, which may trigger to a use-after-free (UAF) issue if there is a subsequent access to this notifier chain.
Fixes the issue by calling ath12k_core_panic_notifier_unregister() in failure cases.
Call trace: notifier_chain_register+0x4c/0x1f0 (P) atomic_notifier_chain_register+0x38/0x68 ath12k_core_init+0x50/0x4e8 [ath12k] ath12k_pci_probe+0x5f8/0xc28 [ath12k] pci_device_probe+0xbc/0x1a8 really_probe+0xc8/0x3a0 __driver_probe_device+0x84/0x1b0 driver_probe_device+0x44/0x130 __driver_attach+0xcc/0x208 bus_for_each_dev+0x84/0x100 driver_attach+0x2c/0x40 bus_add_driver+0x130/0x260 driver_register+0x70/0x138 __pci_register_driver+0x68/0x80 ath12k_pci_init+0x30/0x68 [ath12k] ath12k_init+0x28/0x78 [ath12k]
Tested-on: WCN7850 hw2.0 PCI WLAN.HMT.1.0.c5-00481-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-64k-debug-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-modules-coreUpgrade kernel-rt-64k-debug-develUpgrade kernel-modules-coreUpgrade python3-perfUpgrade kernel-rtUpgrade kernel-zfcpdump-coreUpgrade kernel-devel-matchedUpgrade kernel-rt-64k-debug-modulesUpgrade kernelUpgrade libperfUpgrade kernel-docUpgrade kernel-toolsUpgrade kernel-rt-64k-modules-extraUpgrade kernel-64k-debugUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-modules-extraUpgrade kernel-headersUpgrade kernel-64k-debug-coreUpgrade kernel-64k-debug-devel-matchedUpgrade perfUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-64kUpgrade kernel-rt-64k-modulesUpgrade kernel-64k-devel-matchedUpgrade kernel-64k-coreUpgrade rvUpgrade kernel-debug-devel-matchedUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-cross-headersUpgrade kernel-uki-virtUpgrade kernel-modules-extraUpgrade kernel-64k-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-64k-debug-develUpgrade kernel-64kUpgrade kernel-rt-debug-coreUpgrade kernel-debug-coreUpgrade kernel-64k-modules-coreUpgrade kernel-rt-64k-modules-coreUpgrade kernel-64k-modulesUpgrade kernel-coreUpgrade kernel-debug-modules-extraUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-develUpgrade kernel-rt-modulesUpgrade kernel-tools-libsUpgrade kernel-rt-coreUpgrade kernel-rt-debugUpgrade kernel-rt-64k-coreUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-rt-develUpgrade kernel-rt-64k-debugUpgrade kernel-64k-debug-modulesUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-develUpgrade kernel-64k-debug-modules-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-modulesUpgrade kernel-debugUpgrade kernel-debug-uki-virtUpgrade kernel-zfcpdumpUpgrade kernel-debug-develUpgrade kernel-rt-debug-modules-coreUpgrade rtlaUpgrade kernel-rt-64k-develUpgrade kernel-rt-debug-devel | Nov 20, 2025 | Nov 11, 2025 |
| Oracle_linux | — | Upgrade kernel | Nov 28, 2025 | Jul 3, 2025 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Jul 9, 2025 | Jul 3, 2025 |
| Rocky_linux | — | Upgrade kernel-rt-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-debug-modules-coreUpgrade kernel-rt-coreUpgrade kernel-tools-debuginfoUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-rt-develUpgrade kernel-modulesUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernelUpgrade kernel-coreUpgrade kernel-debug-debuginfoUpgrade kernel-uki-virtUpgrade kernel-debuginfoUpgrade rtlaUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-modules-extra-matchedUpgrade python3-perfUpgrade perfUpgrade perf-debuginfoUpgrade kernel-modules-coreUpgrade kernel-debug-coreUpgrade kernel-modules-extraUpgrade kernel-tools-libsUpgrade python3-perf-debuginfoUpgrade kernel-debug-uki-virtUpgrade kernel-debug-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-zfcpdump-coreUpgrade kernel-toolsUpgrade kernel-rt-modulesUpgrade kernel-rtUpgrade kernel-devel-matchedUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-modules-extraUpgrade kernel-rt-modules-coreUpgrade kernel-debug-devel-matchedUpgrade libperf-debuginfoUpgrade libperfUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-uki-virt-addonsUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-modules-coreUpgrade rvUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debug-modules-extraUpgrade kernel-debuginfo-common-s390xUpgrade kernel-rt-debug-core | Feb 5, 2026 | Nov 21, 2025 |
| Ubuntu | — | Upgrade linux-image-oem-24.04aUpgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-gcpUpgrade linux-image-aws-64kUpgrade linux-image-aws-64k-6.14Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-raspi-6.14Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-genericUpgrade linux-image-generic-64kUpgrade linux-image-generic-6.14Upgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-oracle-6.14Upgrade linux-image-aws-6.14Upgrade linux-image-realtimeUpgrade linux-image-gcp-6.14Upgrade linux-image-azureUpgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-raspiUpgrade linux-image-gcp-64kUpgrade linux-image-6.14.0-1012-azureUpgrade linux-image-oracle-64kUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-virtual-6.14Upgrade linux-image-6.14.0-1012-oemUpgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-virtualUpgrade linux-image-oem-24.04cUpgrade linux-image-oem-6.14Upgrade linux-image-generic-64k-6.14Upgrade linux-image-oracleUpgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-awsUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-24.04Upgrade linux-image-6.14.0-32-genericUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-24.04b | Jul 7, 2025 | Jul 3, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub