Re: [ath-current] wifi: ath11k: fix NULL pointer dereference in ath11k_hal_srng_access_begin
Jeff Johnson <[email protected]> Thu, 02 Jul 2026 14:06:39 -0700
| Newsgroups | org.infradead.lists.ath11k,org.kernel.vger.linux-wireless |
|---|---|
| Message-ID | <[email protected]> |
On Tue, 09 Jun 2026 17:06:09 +0800, Gaole Zhang wrote:
> In ATH11K_QMI_EVENT_FW_READY, ATH11K_FLAG_REGISTERED is set
> unconditionally even when ath11k_core_qmi_firmware_ready() fails.
> This leaves the driver in an inconsistent state where
> initialization is considered complete although the firmware ready
> handling did not finish successfully. During the subsequent SSR,
> the driver enters the restart path based on this incorrect state
> and dereferences uninitialized srng members, resulting in a NULL
> pointer dereference.
>
> [...]
Applied, thanks!
[1/1] wifi: ath11k: fix NULL pointer dereference in ath11k_hal_srng_access_begin
commit: e8d85672dd7e2523f774caafba8f858384e18df7
Best regards,
--
Jeff Johnson <[email protected]>