In the Linux kernel, the following vulnerability has been resolved:
wifi: ath12k: Correct tid cleanup when tid setup fails
Currently, if any error occurs during ath12k_dp_rx_peer_tid_setup(), the tid value is already incremented, even though the corresponding TID is not actually allocated. Proceed to ath12k_dp_rx_peer_tid_delete() starting from unallocated tid, which might leads to freeing unallocated TID and cause potential crash or out-of-bounds access.
Hence, fix by correctly decrementing tid before cleanup to match only the successfully allocated TIDs.
Also, remove tid-- from failure case of ath12k_dp_rx_peer_frag_setup(), as decrementing the tid before cleanup in loop will take care of this.
Compile tested only.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Sep 11, 2025 |
| Suse | — | Upgrade dtb-qcomUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade dtb-armUpgrade kernel-64kb-develUpgrade kernel-macrosUpgrade kernel-rtUpgrade dtb-exynosUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-symsUpgrade dtb-xilinxUpgrade dtb-hisiliconUpgrade kernel-64kbUpgrade dtb-lgUpgrade ocfs2-kmp-rtUpgrade gfs2-kmp-rtUpgrade dtb-amdUpgrade kernel-syms-azureUpgrade kernel-default-extraUpgrade cluster-md-kmp-azureUpgrade kernel-default-develUpgrade dlm-kmp-defaultUpgrade dtb-amlogicUpgrade kernel-source-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmallUpgrade kernel-rt-livepatchUpgrade kernel-rt_debug-vdsoUpgrade kernel-syms-rtUpgrade dtb-socionextUpgrade kernel-azure-develUpgrade kernel-azure-vdsoUpgrade kernel-obs-qaUpgrade kernel-rt-develUpgrade dtb-amazonUpgrade kernel-devel-azureUpgrade dtb-appleUpgrade dtb-apmUpgrade gfs2-kmp-64kbUpgrade kernel-64kb-optionalUpgrade kernel-sourceUpgrade kernel-kvmsmall-develUpgrade kernel-default-optionalUpgrade kernel-docsUpgrade kernel-devel-rtUpgrade kselftests-kmp-defaultUpgrade kernel-zfcpdumpUpgrade dlm-kmp-azureUpgrade dtb-mediatekUpgrade dlm-kmp-64kbUpgrade dtb-allwinnerUpgrade kernel-rt-optionalUpgrade kselftests-kmp-64kbUpgrade kernel-64kb-extraUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-rtUpgrade kernel-azureUpgrade dtb-broadcomUpgrade kernel-rt-extraUpgrade dtb-nvidiaUpgrade kernel-azure-extraUpgrade kernel-rt-vdsoUpgrade ocfs2-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade dtb-renesasUpgrade gfs2-kmp-defaultUpgrade kernel-default-vdsoUpgrade dtb-caviumUpgrade dlm-kmp-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-docs-htmlUpgrade kernel-default-livepatchUpgrade kernel-debug-vdsoUpgrade kernel-default-livepatch-develUpgrade dtb-rockchipUpgrade kernel-develUpgrade kernel-obs-buildUpgrade dtb-freescaleUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-source-vanillaUpgrade kselftests-kmp-rtUpgrade kernel-default-base-rebuildUpgrade kselftests-kmp-azureUpgrade kernel-defaultUpgrade kernel-source-rtUpgrade kernel-rt_debugUpgrade kernel-default-baseUpgrade dtb-sprdUpgrade dtb-marvellUpgrade dtb-alteraUpgrade gfs2-kmp-azureUpgrade kernel-rt_debug-devel | Dec 5, 2025 | Oct 15, 2025 |
| Ubuntu | — | Upgrade linux-image-virtual-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-6.8Upgrade linux-image-gke-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-azure-fips-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-ibm-classicUpgrade linux-image-realtimeUpgrade linux-image-azure-lts-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-aws-fips-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-realtime-6.8.1Upgrade linux-image-azure-fipsUpgrade linux-image-generic-64k-6.8Upgrade linux-image-oracle-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-azureUpgrade linux-image-raspi-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oracleUpgrade linux-image-aws-lts-24.04Upgrade linux-image-ibmUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-aws-64k-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-awsUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-ibm-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-raspiUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-virtualUpgrade linux-image-oem-22.04dUpgrade linux-image-oem-22.04aUpgrade linux-image-gke-64k-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-fipsUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-xilinxUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-nvidiaUpgrade linux-image-oem-22.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-generic-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-aws-fipsUpgrade linux-image-gkeopUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-oracle-64kUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-aws-64kUpgrade linux-image-intel-iotgUpgrade linux-image-aws-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-lowlatency-64kUpgrade linux-image-xilinx-6.8 | Feb 12, 2026 | Sep 11, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub