SB20260812347 - NULL pointer dereference in Linux kernel ath ath12k driver

Description

This security bulletin contains information about 1 vulnerability.

1) NULL pointer dereference (CVE-ID: CVE-2026-68191)

CWE-ID: CWE-476 - NULL Pointer Dereference

CVSSv4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to null pointer dereference in ath12k_link_sta_rhash_tbl_destroy in the ath12k driver when cleaning up an uninitialized hash table during device unbind or failed initialization. A local user can trigger driver cleanup in this state to cause a denial of service.

The issue occurs if the device was never fully started or if initialization failed before the hash table was created.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/17a4298f7794843af0094035723dc5e7311c7453
• https://git.kernel.org/stable/c/70231dcd782201579990ded73e0435d18bb524ca