Linux kernel security vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the fact that deleting debugfs entries under certain circumstances can cause ath11k to crash when attempting...

kernel: Linux kernel: Memory leak in ath11k Wi-Fi driver leads to Denial of Service

A flaw was found in the Linux kernel's ath11k Wi-Fi driver. This memory leak vulnerability occurs when the ath11kpeerfind function fails to properly release cryptographic resources. An attacker on the adjacent network with low privileges could exploit this, leading to a gradual reduction in...

kernel: wifi: ath11k: fix memory leak in WMI firmware stats

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix memory leak in WMI firmware stats Memory allocated for firmware pdev, vdev and beacon statistics are not released during rmmod. Fix it by calling ath11kfwstatsfree function before hardware unregister. While at i...

kernel: wifi: ath11k: fix monitor mode bringup crash

A null pointer dereference vulnerability was found in the ath11k wireless driver in the Linux kernel. When an interface is brought up in monitor mode, the driver attempts to extract packet type from RAW monitor ring packets, which lack the expected structure. This causes a kernel crash due to...

kernel: wifi: ath11k: fix monitor mode bringup crash

A null pointer dereference vulnerability was found in the ath11k wireless driver in the Linux kernel. When an interface is brought up in monitor mode, the driver attempts to extract packet type from RAW monitor ring packets, which lack the expected structure. This causes a kernel crash due to...

kernel: wifi: ath11k: fix deinitialization of firmware resources

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix deinitialization of firmware resources Currently, in ath11kahbfwresourcesinit, iommu domain mapping is done only for the chipsets having fixed firmware memory. Also, for such chipsets, mapping is done only if it...

kernel: Linux kernel: Memory leak in ath11k Wi-Fi driver leads to Denial of Service

A flaw was found in the Linux kernel's ath11k Wi-Fi driver. This memory leak vulnerability occurs when the ath11kpeerfind function fails to properly release cryptographic resources. An attacker on the adjacent network with low privileges could exploit this, leading to a gradual reduction in...

PT-2025-40765

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the ath11k driver related to WMI firmware statistics. Memory allocated for firmware pdev, vdev, and beacon statistics is not released during module removal. The...

kernel: wifi: ath11k: mhi: fix potential memory leak in ath11k_mhi_register()

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: mhi: fix potential memory leak in ath11kmhiregister mhialloccontroller allocates a memory space for mhictrl. When gets some error, mhictrl should be freed with mhifreecontroller. But when ath11kmhireadaddrfromdt...

kernel: wifi: ath11k: mhi: fix potential memory leak in ath11k_mhi_register()

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: mhi: fix potential memory leak in ath11kmhiregister mhialloccontroller allocates a memory space for mhictrl. When gets some error, mhictrl should be freed with mhifreecontroller. But when ath11kmhireadaddrfromdt...

PT-2025-54058

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.3.0-rc7-next-20230418-00549-g1e096a17625a Description The Linux kernel contains an issue in the ath11k driver related to the registration of 6Ghz-only PHYs. A 6Ghz-only PHY, where the Basic Data Format BDF does...

GSD-2023-1000804 wifi: ath11k: fix firmware assert during bandwidth change for peer sta

wifi: ath11k: fix firmware assert during bandwidth change for peer sta This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

PT-2023-33665 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: The issue is related to the initialization of the qmi msg handler data structure in the ath11k wifi driver. The actual impact and attack plausibility have not yet been proven. Recommendation...

PT-2025-49713

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the ath11k driver related to handling fragmented packets from an uninitialized peer in datapath dp. Specifically, when a maximum number of virtual...

PT-2025-49468

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.0-rc5-wt-ath-656295-gef907406320c-dirty 6 Description The Linux kernel contains a flaw within the ath11k module related to monitor mode bringup. When an interface is activated in monitor mode, a NULL pointer...

kernel: ath11k: fix netdev open race

In the Linux kernel, the following vulnerability has been resolved: ath11k: fix netdev open race Make sure to allocate resources needed before registering the device. This specifically avoids having a racing open trigger a BUGON in modtimer when ath11kmacopstart is called before the monreaptimer ...

kernel: ath11k: free peer for station when disconnect from AP for QCA6390/WCN6855

A vulnerability was found in the Linux kernel's ath11k driver, where an accidental skip was introduced during peer deletion, originally intended to fix a firmware crash by changing the WMI command sequence. This results in a potential use-after-free scenario caused by the peer structure not being...

kernel: ath11k: mhi: use mhi_sync_power_up()

In the Linux kernel, the following vulnerability has been resolved: ath11k: mhi: use mhisyncpowerup If amss.bin was missing ath11k would crash during 'rmmod ath11kpci'. The reason for that was that we were using mhiasyncpowerup which does not check any errors. But mhisyncpowerup on the other hand...

kernel: ath11k: fix the warning of dev_wake in mhi_pm_disable_transition()

In the Linux kernel, the following vulnerability has been resolved: ath11k: fix the warning of devwake in mhipmdisabletransition When test device recovery with below command, it has warning in message as below. echo assert /sys/kernel/debug/ath11k/wcn6855\ hw2.0/simulatefwcrash echo assert...

GSD-2022-1006854 wifi: ath11k: fix failed to find the peer with peer_id 0 when disconnected

wifi: ath11k: fix failed to find the peer with peerid 0 when disconnected This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...