CVE-2023-54229
Low risk· EPSS 10%Exploitation Probability (EPSS)
Low risk10th percentile - higher than 10% of all known CVEs
Summary
In the Linux kernel, the ath11k Wi-Fi driver fails to register a 6 GHz-only phy when the BDF does not allow the 7115 MHz channel, due to what appears to be a typo. This triggers a kernel warning and returns error -22, preventing the radio from being registered with mac80211.
Risk Assessment
On affected systems with an ath11k adapter, the 6 GHz Wi-Fi interface may fail to initialize entirely, causing wireless network unavailability and loss of connectivity.
Recommendation
Update the Linux kernel to a version containing the ath11k driver fix or apply the appropriate patch. After updating, verify that the 6 GHz interface registers correctly.
Other vulnerabilities in Linux kernel ath11k driver
See all- CVE-2023-54141Low risk· EPSS 10%
In the Linux kernel, the wifi ath11k driver for the IPQ5018 chipset is missing the hw_ops->get_ring_selector() assignment. When sending data after clients connect, an uninitialized function pointer is called, resulting in a NULL pointer dereference and kernel crash.
- CVE-2022-50665High
In the Linux kernel, the ath11k WiFi driver has a bug where after memset of the ppdu_info structure, the peer_id field is not initialized to HAL_INVALID_PEERID. This causes a condition check mismatch and prints the log "failed to find the peer with peer_id 0" during scanning while the station is disconnected.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix registration of 6Ghz-only phy without the full channel range Because of what seems to be a typo, a 6Ghz-only phy for which the BDF does not allow the 7115Mhz channel will fail to register: WARNING: CPU: 2 PID: 106 at net/wireless/core.c:907 wiphy_register+0x914/0x954 Modules linked in: ath11k_pci sbsa_gwdt CPU: 2 PID: 106 Comm: kworker/u8:5 Not tainted 6.3.0-rc7-next-20230418-00549-g1e096a17625a-dirty #9 Hardware name: Freebox V7R Board (DT) Workqueue: ath11k_qmi_driver_event ath11k_qmi_driver_event_work pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : wiphy_register+0x914/0x954 lr : ieee80211_register_hw+0x67c/0xc10 sp : ffffff800b123aa0 x29: ffffff800b123aa0 x28: 0000000000000000 x27: 0000000000000000 x26: 0000000000000000 x25: 0000000000000006 x24: ffffffc008d51418 x23: ffffffc008cb0838 x22: ffffff80176c2460 x21: 0000000000000168 x20: ffffff80176c0000 x19: ffffff80176c03e0 x18: 0000000000000014 x17: 00000000cbef338c x16: 00000000d2a26f21 x15: 00000000ad6bb85f x14: 0000000000000020 x13: 0000000000000020 x12: 00000000ffffffbd x11: 0000000000000208 x10: 00000000fffffdf7 x9 : ffffffc009394718 x8 : ffffff80176c0528 x7 : 000000007fffffff x6 : 0000000000000006 x5 : 0000000000000005 x4 : ffffff800b304284 x3 : ffffff800b304284 x2 : ffffff800b304d98 x1 : 0000000000000000 x0 : 0000000000000000 Call trace: wiphy_register+0x914/0x954 ieee80211_register_hw+0x67c/0xc10 ath11k_mac_register+0x7c4/0xe10 ath11k_core_qmi_firmware_ready+0x1f4/0x570 ath11k_qmi_driver_event_work+0x198/0x590 process_one_work+0x1b8/0x328 worker_thread+0x6c/0x414 kthread+0x100/0x104 ret_from_fork+0x10/0x20 ---[ end trace 0000000000000000 ]--- ath11k_pci 0002:01:00.0: ieee80211 registration failed: -22 ath11k_pci 0002:01:00.0: failed register the radio with mac80211: -22 ath11k_pci 0002:01:00.0: failed to create pdev core: -22
Vulnerability data from NVD (NIST) · CISA KEV · EPSS