Out-of-Bounds Write Vulnerability in Linux Kernel's ath11k Package
Summary
DEBIAN-CVE-2025-23133: In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: update channel list in reg notifier instead reg worker Currently when ath11k gets a new channel list, it will be processed according to th... Affects linux versions < 6.12.48-1. Fixed in 6.12.48-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, providing essential services for hardware and software interaction. The ath11k package is a driver for Qualcomm's wireless devices, enabling connectivity and communication. This package is crucial for managing Wi-Fi connections, but it is susceptible to vulnerabilities that can lead to severe security issues.
Vulnerability Detail
In the Linux kernel, a vulnerability exists in the ath11k driver related to the handling of new channel lists. When a new channel list is received, the driver processes it in a manner that can lead to an out-of-bounds write error. This occurs because the driver attempts to update the firmware with the new channel list before the previous processing step is completed. This flaw can result in memory corruption and potential system crashes, making it a critical issue that needs immediate attention.
How To Fix
Minimum fixed version
6.12.48-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can avoid using the ath11k driver until the system is updated to the patched version. Additionally, enabling the flag NL80211_REGDOM_SET_BY_DRIVER can help mitigate the issue by ensuring that the channel list is fully processed before any updates are made.
Conclusion
The vulnerability in the ath11k driver of the Linux kernel poses a significant risk due to its potential for memory corruption and system instability. Users are strongly advised to update their systems to the latest patched versions to mitigate this risk. For those unable to update immediately, temporary workarounds are available.
See every vulnerability recorded for linux →
FAQ
The vulnerability is an out-of-bounds write error in the ath11k driver of the Linux kernel, which can lead to memory corruption.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
Exploitation of this vulnerability can lead to system crashes, memory corruption, and potentially allow attackers to execute arbitrary code.
Yes, patches are available in the form of updated kernel versions: 6.12.48-1 for Debian 13 and 6.16.3-1 for Debian 14.
If immediate updates are not possible, consider using the workaround of avoiding the ath11k driver or enabling the NL80211_REGDOM_SET_BY_DRIVER flag.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
