The ath12k wireless driver in the Linux kernel contains a flaw that allows a NULL pointer dereference when a virtual device (vdev) fails to be created but is still added to the link map. This occurs during link set‑up and subsequently in key installation or station removal paths. The consequence is a kernel panic, which is a critical system failure that can be exploited to bring the device offline. The weakness is a classic NULL pointer dereference, identified as CWE-476.

All Linux kernel installations that load the ath12k WLAN driver are affected, regardless of kernel version, until the patch that checks arvif->is_created before allocation is applied. The vulnerability was demonstrated on a WCN7850 hardware module in system tests, indicating that any system using this hardware and the ath12k driver is at risk.

The bug leads to a catastrophic crash, giving an attacker local or remote control of the wireless interface a reliable denial‑of‑service vector. The CVSS score is 5.5, indicating moderate severity. EPSS data indicates a probability of less than 1%, suggesting a very low likelihood of exploitation, and the vulnerability is not listed in the CISA KEV catalog. The likely attack path involves manipulating link configuration or key management via the wireless stack, which can be triggered by crafted traffic from a rogue access point or by a malicious wpa_supplicant process. Given the lack of data on exploit frequency, the risk is inferred to be high for affected systems.