This vulnerability arises from a missing cleanup path in the ath11k Wi‑Fi driver. When a firmware crash occurs, the driver calls ieee80211_restart_hw() but forgets to free the arsta->rx_stats and tx_stats structures. As a result, the kernel reports unreferenced objects and consumes kernel memory continuously, leading to a gradual memory leak that could ultimately exhaust system resources or trigger a denial of service. The issue, scored at 5.5 on CVSS, presents a local denial‑of‑service risk tied to kernel memory consumption. Because the exploit requires a firmware crash to trigger the uncleaned paths, the likelihood of automated exploitation is low. It is unknown whether any public exploitation has been reported; the CVE data does not mention confirmed exploits.

The flaw applies to Linux kernel implementations that use the ath11k Wi‑Fi driver, such as the hardware QCN9074 (PCI WLAN.HK.2.9.0.1‑01977‑QCAHKSWPL_SILICONZ‑1) and other devices built on the same ath11k chipset. The vendor information lists Linux:Linux, indicating kernel‑level exposure. No specific kernel version is cited, so any deployment that includes an unpatched ath11k driver may be vulnerable.

The vulnerability presents a local denial‑of‑service risk tied to kernel memory consumption. Because the exploit requires a firmware crash to trigger the uncleaned paths, the likelihood of automated exploitation is low. It is unknown whether any public exploitation has been reported; the CVE data does not mention confirmed exploits. Absence from the CISA KEV catalog and an EPSS score of < 1% suggest that the threat was not actively exploited at the time of reporting. Nevertheless, repeated crashes could cause memory exhaustion, so the risk escalates in environments prone to firmware instability.