[ath-current] wifi: ath11k: fix NULL pointer dereference in ath11k_hal_srng_access_begin
Jeff Johnson
jeff.johnson at oss.qualcomm.com
Thu Jul 2 14:06:39 PDT 2026
On Tue, 09 Jun 2026 17:06:09 +0800, Gaole Zhang wrote:
> In ATH11K_QMI_EVENT_FW_READY, ATH11K_FLAG_REGISTERED is set
> unconditionally even when ath11k_core_qmi_firmware_ready() fails.
> This leaves the driver in an inconsistent state where
> initialization is considered complete although the firmware ready
> handling did not finish successfully. During the subsequent SSR,
> the driver enters the restart path based on this incorrect state
> and dereferences uninitialized srng members, resulting in a NULL
> pointer dereference.
>
> [...]
Applied, thanks!
[1/1] wifi: ath11k: fix NULL pointer dereference in ath11k_hal_srng_access_begin
commit: e8d85672dd7e2523f774caafba8f858384e18df7
Best regards,
--
Jeff Johnson <jeff.johnson at oss.qualcomm.com>
More information about the ath11k
mailing list