In the Linux kernel, the following vulnerability has been resolved:
wifi: ath12k: Pass ab pointer directly to ath12k_dp_tx_get_encap_type()
In ath12k_dp_tx_get_encap_type(), the arvif parameter is only used to retrieve the ab pointer. In vdev delete sequence the arvif->ar could become NULL and that would trigger kernel panic. Since the caller ath12k_dp_tx() already has a valid ab pointer, pass it directly to avoid panic and unnecessary dereferencing.
PC points to "ath12k_dp_tx+0x228/0x988 [ath12k]" LR points to "ath12k_dp_tx+0xc8/0x988 [ath12k]". The Backtrace obtained is as follows: ath12k_dp_tx+0x228/0x988 [ath12k] ath12k_mac_tx_check_max_limit+0x608/0x920 [ath12k] ieee80211_process_measurement_req+0x320/0x348 [mac80211] ieee80211_tx_dequeue+0x9ac/0x1518 [mac80211] ieee80211_tx_dequeue+0xb14/0x1518 [mac80211] ieee80211_tx_prepare_skb+0x224/0x254 [mac80211] ieee80211_xmit+0xec/0x100 [mac80211] __ieee80211_subif_start_xmit+0xc50/0xf40 [mac80211] ieee80211_subif_start_xmit+0x2e8/0x308 [mac80211] netdev_start_xmit+0x150/0x18c dev_hard_start_xmit+0x74/0xc0
Tested-on: QCN9274 hw2.0 PCI WLAN.WBE.1.3.1-00173-QCAHKSWPL_SILICONZ-1
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Aug 19, 2025 |
| Suse | — | Upgrade kernel-azure-vdsoUpgrade kernel-debugUpgrade kernel-default-livepatch-develUpgrade dtb-amazonUpgrade reiserfs-kmp-rtUpgrade dtb-broadcomUpgrade kernel-rt-vdsoUpgrade kernel-source-azureUpgrade kernel-docs-htmlUpgrade kernel-syms-rtUpgrade kernel-azure-extraUpgrade kernel-debug-develUpgrade kernel-default-develUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-azureUpgrade dtb-amdUpgrade dtb-amlogicUpgrade cluster-md-kmp-azureUpgrade gfs2-kmp-64kbUpgrade gfs2-kmp-azureUpgrade kernel-default-extraUpgrade kernel-azureUpgrade kernel-default-livepatchUpgrade dlm-kmp-defaultUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade kselftests-kmp-64kbUpgrade kernel-default-baseUpgrade kernel-rt_debug-develUpgrade kernel-kvmsmall-develUpgrade dtb-appleUpgrade kernel-obs-qaUpgrade kernel-source-vanillaUpgrade kernel-source-rtUpgrade kernel-azure-optionalUpgrade kernel-rt_debug-vdsoUpgrade dtb-alteraUpgrade kernel-64kbUpgrade ocfs2-kmp-64kbUpgrade dtb-marvellUpgrade dlm-kmp-64kbUpgrade dtb-lgUpgrade kernel-rt_debugUpgrade ocfs2-kmp-rtUpgrade dtb-freescaleUpgrade kernel-rt-optionalUpgrade kernel-64kb-optionalUpgrade kernel-symsUpgrade kernel-kvmsmall-vdsoUpgrade dtb-hisiliconUpgrade dtb-socionextUpgrade dtb-renesasUpgrade gfs2-kmp-rtUpgrade dtb-apmUpgrade dlm-kmp-azureUpgrade dtb-rockchipUpgrade dtb-nvidiaUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade kernel-kvmsmallUpgrade cluster-md-kmp-rtUpgrade kernel-develUpgrade gfs2-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-docsUpgrade kernel-rt-livepatchUpgrade kernel-rtUpgrade dtb-qcomUpgrade kernel-devel-rtUpgrade kernel-azure-develUpgrade kernel-64kb-develUpgrade kernel-obs-buildUpgrade kernel-64kb-extraUpgrade dtb-caviumUpgrade dtb-allwinnerUpgrade dtb-mediatekUpgrade ocfs2-kmp-defaultUpgrade dtb-sprdUpgrade dtb-exynosUpgrade kernel-rt-develUpgrade dtb-armUpgrade dlm-kmp-rtUpgrade kernel-sourceUpgrade kernel-rt-extraUpgrade kernel-default-base-rebuildUpgrade kernel-defaultUpgrade dtb-xilinxUpgrade kernel-default-vdsoUpgrade kernel-debug-vdsoUpgrade kernel-syms-azureUpgrade kernel-macrosUpgrade kernel-devel-azureUpgrade kernel-default-optional | Dec 5, 2025 | Sep 22, 2025 |
| Ubuntu | — | Upgrade linux-image-aws-6.14Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.14.0-36-genericUpgrade linux-image-gcp-64kUpgrade linux-image-6.14.0-1017-awsUpgrade linux-image-generic-6.14Upgrade linux-image-oem-24.04Upgrade linux-image-virtual-6.14Upgrade linux-image-6.14.0-1018-raspiUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gcp-6.14Upgrade linux-image-oem-24.04aUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.14.0-1017-oracleUpgrade linux-image-6.14.0-1020-gcp-64kUpgrade linux-image-6.14.0-1016-oemUpgrade linux-image-6.14.0-1017-azureUpgrade linux-image-generic-64kUpgrade linux-image-azureUpgrade linux-image-6.14.0-1017-oracle-64kUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-aws-64kUpgrade linux-image-raspi-6.14Upgrade linux-image-aws-64k-6.14Upgrade linux-image-realtime-6.14Upgrade linux-image-6.14.0-1016-realtimeUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-oracle-64kUpgrade linux-image-gcpUpgrade linux-image-raspiUpgrade linux-image-awsUpgrade linux-image-oracle-6.14Upgrade linux-image-realtimeUpgrade linux-image-6.14.0-1017-aws-64kUpgrade linux-image-genericUpgrade linux-image-6.14.0-36-generic-64kUpgrade linux-image-virtualUpgrade linux-image-oracleUpgrade linux-image-generic-64k-6.14Upgrade linux-image-azure-6.14Upgrade linux-image-oem-6.14Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.14.0-1020-gcp | Nov 25, 2025 | Nov 21, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub