[ath-current] wifi: ath11k: fix NULL pointer dereference in ath11k_hal_srng_access_begin

Jeff Johnson jeff.johnson at oss.qualcomm.com
Thu Jul 2 14:06:39 PDT 2026


On Tue, 09 Jun 2026 17:06:09 +0800, Gaole Zhang wrote:
> In ATH11K_QMI_EVENT_FW_READY, ATH11K_FLAG_REGISTERED is set
> unconditionally even when ath11k_core_qmi_firmware_ready() fails.
> This leaves the driver in an inconsistent state where
> initialization is considered complete although the firmware ready
> handling did not finish successfully. During the subsequent SSR,
> the driver enters the restart path based on this incorrect state
> and dereferences uninitialized srng members, resulting in a NULL
> pointer dereference.
> 
> [...]

Applied, thanks!

[1/1] wifi: ath11k: fix NULL pointer dereference in ath11k_hal_srng_access_begin
      commit: e8d85672dd7e2523f774caafba8f858384e18df7

Best regards,
-- 
Jeff Johnson <jeff.johnson at oss.qualcomm.com>




More information about the ath11k mailing list