SB20260812169 - NULL pointer dereference in Linux kernel ath ath11k driver

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB20260812169

SB20260812169 - NULL pointer dereference in Linux kernel ath ath11k driver

Published: August 12, 2026

Security Bulletin ID SB20260812169
CSH Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Local access
Highest impact Denial of service

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 vulnerability.


1) NULL pointer dereference (CVE-ID: CVE-2026-68362)

CWE-ID: CWE-476 - NULL Pointer Dereference

CVSSv4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to a NULL pointer dereference in ath11k_hal_srng_access_begin and the ath11k driver restart path when handling firmware ready events after a failed initialization. A local user can trigger a subsystem restart after firmware ready handling fails to cause a denial of service.

The issue occurs because the driver can enter recovery with an inconsistent registered state after firmware ready processing does not complete successfully.


Remediation

Install update from vendor's website.

References