[PATCH ath-next 0/2] wifi: ath12k: fix NULL deref when MLO link activation fails

Jeff Johnson jeff.johnson at oss.qualcomm.com
Mon Jun 1 10:00:35 PDT 2026


On Mon, 11 May 2026 21:49:03 -0700, Wei Zhang wrote:
> ath12k_mac_op_change_sta_links() adds a link to ahsta->links_map
> before verifying that the link's vdev is ready, allowing broken links
> to be processed by subsequent operations and causing NULL dereferences.
> 
> Patch 1 fixes three error path inconsistencies in ath12k_mac_vdev_create()
> that leave arvif state or vdev resources inconsistent: a direct return on
> wmi_vdev_create failure bypasses err: which clears arvif->ar; and both
> failure paths in err_peer_del skip the DP peer cleanup and vdev rollback.
> 
> [...]

Applied, thanks!

[1/2] wifi: ath12k: fix inconsistent arvif state in vdev_create error paths
      commit: c972636efc63f0f43d725b59805dd1ae5bc4b31e
[2/2] wifi: ath12k: fix NULL deref in change_sta_links for unready link
      commit: 47809a7c8348bc4a332ccc26a37c7145a5f609f8

Best regards,
-- 
Jeff Johnson <jeff.johnson at oss.qualcomm.com>




More information about the ath12k mailing list