In the Linux kernel, the following vulnerability has been resolved:
wifi: ath11k: clear initialized flag for deinit-ed srng lists
In a number of cases we see kernel panics on resume due to ath11k kernel page fault, which happens under the following circumstances:
1) First ath11k_hal_dump_srng_stats() call
Last interrupt received for each group: ath11k_pci 0000:01:00.0: group_id 0 22511ms before ath11k_pci 0000:01:00.0: group_id 1 14440788ms before [..] ath11k_pci 0000:01:00.0: failed to receive control response completion, polling.. ath11k_pci 0000:01:00.0: Service connect timeout ath11k_pci 0000:01:00.0: failed to connect to HTT: -110 ath11k_pci 0000:01:00.0: failed to start core: -110 ath11k_pci 0000:01:00.0: firmware crashed: MHI_CB_EE_RDDM ath11k_pci 0000:01:00.0: already resetting count 2 ath11k_pci 0000:01:00.0: failed to wait wlan mode request (mode 4): -110 ath11k_pci 0000:01:00.0: qmi failed to send wlan mode off: -110 ath11k_pci 0000:01:00.0: failed to reconfigure driver on crash recovery [..]
2) At this point reconfiguration fails (we have 2 resets) and ath11k_core_reconfigure_on_crash() calls ath11k_hal_srng_deinit() which destroys srng lists. However, it does not reset per-list ->initialized flag.
3) Second ath11k_hal_dump_srng_stats() call sees stale ->initialized flag and attempts to dump srng stats:
Last interrupt received for each group: ath11k_pci 0000:01:00.0: group_id 0 66785ms before ath11k_pci 0000:01:00.0: group_id 1 14485062ms before ath11k_pci 0000:01:00.0: group_id 2 14485062ms before ath11k_pci 0000:01:00.0: group_id 3 14485062ms before ath11k_pci 0000:01:00.0: group_id 4 14780845ms before ath11k_pci 0000:01:00.0: group_id 5 14780845ms before ath11k_pci 0000:01:00.0: group_id 6 14485062ms before ath11k_pci 0000:01:00.0: group_id 7 66814ms before ath11k_pci 0000:01:00.0: group_id 8 68997ms before ath11k_pci 0000:01:00.0: group_id 9 67588ms before ath11k_pci 0000:01:00.0: group_id 10 69511ms before BUG: unable to handle page fault for address: ffffa007404eb010 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 100000067 P4D 100000067 PUD 10022d067 PMD 100b01067 PTE 0 Oops: 0000 [#1] PREEMPT SMP NOPTI RIP: 0010:ath11k_hal_dump_srng_stats+0x2b4/0x3b0 [ath11k] Call Trace: <TASK> ? __die_body+0xae/0xb0 ? page_fault_oops+0x381/0x3e0 ? exc_page_fault+0x69/0xa0 ? asm_exc_page_fault+0x22/0x30 ? ath11k_hal_dump_srng_stats+0x2b4/0x3b0 [ath11k (HASH:6cea 4)] ath11k_qmi_driver_event_work+0xbd/0x1050 [ath11k (HASH:6cea 4)] worker_thread+0x389/0x930 kthread+0x149/0x170
Clear per-list ->initialized flag in ath11k_hal_srng_deinit().
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Sep 8, 2025 | Sep 8, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 16, 2025 | Aug 19, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Aug 19, 2025 |
| Suse | — | Upgrade kernel-rtUpgrade kselftests-kmp-azureUpgrade dtb-renesasUpgrade kernel-syms-azureUpgrade kernel-default-vdsoUpgrade kernel-azureUpgrade kernel-debugUpgrade kernel-obs-buildUpgrade cluster-md-kmp-rtUpgrade kernel-source-azureUpgrade dtb-freescaleUpgrade kernel-develUpgrade gfs2-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-64kb-develUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-extraUpgrade kernel-64kbUpgrade kernel-rt-develUpgrade ocfs2-kmp-azureUpgrade kernel-source-rtUpgrade dtb-amazonUpgrade reiserfs-kmp-64kbUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade dtb-xilinxUpgrade gfs2-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-source-vanillaUpgrade dtb-alteraUpgrade kernel-64kb-extraUpgrade kernel-default-develUpgrade kernel-rt_debug-develUpgrade kernel-default-base-rebuildUpgrade kernel-debug-vdsoUpgrade kernel-azure-optionalUpgrade dtb-lgUpgrade kernel-devel-rtUpgrade kernel-sourceUpgrade dtb-allwinnerUpgrade kernel-rt-livepatchUpgrade dtb-exynosUpgrade kernel-default-optionalUpgrade dtb-hisiliconUpgrade kernel-default-livepatchUpgrade kernel-default-livepatch-develUpgrade dtb-caviumUpgrade dtb-qcomUpgrade dlm-kmp-64kbUpgrade kernel-rt-optionalUpgrade dtb-broadcomUpgrade dtb-sprdUpgrade kernel-macrosUpgrade gfs2-kmp-64kbUpgrade kernel-docsUpgrade kernel-azure-develUpgrade kernel-azure-vdsoUpgrade dlm-kmp-azureUpgrade kernel-symsUpgrade dtb-nvidiaUpgrade kernel-default-extraUpgrade kernel-docs-htmlUpgrade kselftests-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-kvmsmallUpgrade kernel-syms-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-debug-develUpgrade kernel-64kb-optionalUpgrade dtb-appleUpgrade cluster-md-kmp-defaultUpgrade gfs2-kmp-rtUpgrade dtb-amdUpgrade kernel-defaultUpgrade dtb-apmUpgrade dlm-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-rt-vdsoUpgrade kernel-obs-qaUpgrade dtb-amlogicUpgrade dtb-rockchipUpgrade kernel-rt_debug-vdsoUpgrade kernel-devel-azureUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade dtb-armUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-extraUpgrade kernel-kvmsmall-develUpgrade kernel-default-baseUpgrade dtb-socionextUpgrade dtb-mediatekUpgrade dtb-marvell | Dec 5, 2025 | Sep 18, 2025 |
| Ubuntu | — | Upgrade linux-image-oem-22.04dUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-gkeop-5.15Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-5.15.0-1092-nvidiaUpgrade linux-image-5.15.0-1097-gcp-fipsUpgrade linux-image-6.14.0-1016-oemUpgrade linux-image-oem-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-fipsUpgrade linux-image-6.14.0-1017-oracle-64kUpgrade linux-image-kvmUpgrade linux-image-azure-6.14Upgrade linux-image-oracle-6.14Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-realtimeUpgrade linux-image-6.14.0-1017-oracleUpgrade linux-image-generic-lpaeUpgrade linux-image-realtime-6.14Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-5.15.0-1089-kvmUpgrade linux-image-6.14.0-1020-gcpUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-5.15.0-1080-gkeopUpgrade linux-image-gcp-6.8Upgrade linux-image-generic-64k-5.15Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.14.0-1017-azureUpgrade linux-image-6.14.0-36-genericUpgrade linux-image-5.15.0-1038-nvidia-tegra-igxUpgrade linux-image-oracle-5.15Upgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.14.0-36-generic-64kUpgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-aws-fips-5.15Upgrade linux-image-generic-5.15Upgrade linux-image-virtual-5.15Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oem-6.14Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-5.15.0-163-lowlatencyUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-5.15.0-1097-aws-64kUpgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-ibmUpgrade linux-image-virtual-6.8Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-azure-fipsUpgrade linux-image-6.14.0-1017-awsUpgrade linux-image-azure-lts-24.04Upgrade linux-image-5.15.0-163-lowlatency-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-gcp-5.15Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-5.15.0-1038-nvidia-tegra-igx-rtUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-awsUpgrade linux-image-aws-64k-5.15Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-1094-oracleUpgrade linux-image-5.15.0-1096-realtimeUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-azure-cvmUpgrade linux-image-ibm-classicUpgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-1091-ibmUpgrade linux-image-raspiUpgrade linux-image-aws-fips-6.8Upgrade linux-image-5.15.0-1091-raspiUpgrade linux-image-generic-64k-6.14Upgrade linux-image-lowlatency-6.8Upgrade linux-image-5.15.0-1049-nvidia-tegraUpgrade linux-image-ibm-5.15Upgrade linux-image-oracleUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-gke-64kUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-aws-fipsUpgrade linux-image-6.14.0-1017-aws-64kUpgrade linux-image-aws-5.15Upgrade linux-image-aws-lts-22.04Upgrade linux-image-nvidia-5.15Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-aws-6.14Upgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-5.15.0-1049-nvidia-tegra-rtUpgrade linux-image-aws-64k-6.8Upgrade linux-image-5.15.0-1097-gcpUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-oem-20.04bUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-intelUpgrade linux-image-gcp-6.14Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-5.15.0-163-generic-64kUpgrade linux-image-5.15.0-1101-azure-fipsUpgrade linux-image-5.15.0-1102-azureUpgrade linux-image-5.15.0-1097-aws-fipsUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-virtualUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-5.15Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-5.15.0-1092-nvidia-lowlatencyUpgrade linux-image-raspi-5.15Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-azure-lts-22.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.14.0-1016-realtimeUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-kvm-5.15Upgrade linux-image-5.15.0-1061-xilinx-zynqmpUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-oem-20.04cUpgrade linux-image-oem-22.04bUpgrade linux-image-intel-iotgUpgrade linux-image-genericUpgrade linux-image-5.15.0-1089-intel-iot-realtimeUpgrade linux-image-ibm-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-gkeopUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.14.0-1018-raspiUpgrade linux-image-5.15.0-1097-awsUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-163-generic-lpaeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-gke-64k-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-generic-6.14Upgrade linux-image-azureUpgrade linux-image-aws-64k-6.14Upgrade linux-image-6.14.0-1020-gcp-64kUpgrade linux-image-gke-6.8Upgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-lowlatencyUpgrade linux-image-nvidia-tegraUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-5.15.0-1101-azureUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-azure-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-5.15.0-163-fipsUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-xilinx-6.8Upgrade linux-image-raspi-6.14Upgrade linux-image-oem-24.04Upgrade linux-image-nvidiaUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-azure-fips-5.15Upgrade linux-image-5.15.0-1092-intel-iotgUpgrade linux-image-5.15.0-163-genericUpgrade linux-image-realtime-5.15Upgrade linux-image-realtime-6.8.1Upgrade linux-image-xilinxUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-oem-20.04dUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-gkeUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-azure-5.15Upgrade linux-image-5.15.0-1093-gkeUpgrade linux-image-gcpUpgrade linux-image-aws-6.8Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-oracle-6.8Upgrade linux-image-virtual-6.14Upgrade linux-image-fips-5.15 | Nov 25, 2025 | Nov 21, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 19, 2025 | Aug 19, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub