The ath12k wireless driver in the Linux kernel contains multiple error‑path bugs that fail to clean up internal data structures when virtual device (VDEV) creation or peer deletion operations fail. In particular, a partially initialized arvif structure can remain in the driver’s list, a peer deletion may be skipped, and virtual device bookkeeping entries may be left dangling. These inconsistencies can cause the kernel to misinterpret device state, leading to kernel panics or persistent loss of Wi‑Fi functionality for the affected interface. The weaknesses are classifiable as improper resource initialization and improper cleanup, reflecting missing release logic.

The flaw applies to any Linux kernel installation that includes the ath12k driver for Qualcomm wireless adapters, such as the WCN7850 and similar devices. All distributions shipping a kernel before the commit c972636e5 (and without backporting the fix) are vulnerable. The advisory does not list specific kernel releases, so any kernel version that still includes the old ath12k code is at risk. Users of embedded devices, laptops, or servers that rely on this driver should verify whether their kernel includes the fixed version.

The EPSS score is reported as <1% and the vulnerability is not listed in CISA’s KEV catalog, indicating no known exploitation at present. The likely attack vector requires a local attacker with permission to drive the kernel’s Wi‑Fi subsystem, for example by initiating VDEV creation or peer configuration. Because the error occurs inside kernel driver code and requires local interaction, remote exploitation is unlikely. However, when triggered the impact is high: a kernel crash or permanent Wi‑Fi unavailability could cause service disruption and require a reboot. The risk remains significant due to the severity of the outcomes, even in the absence of confirmed exploitation.