Description
In the Linux kernel, the following vulnerability has been resolved:
wifi: ath12k: Fix memory leak due to multiple rx_stats allocation
rx_stats for each arsta is allocated when adding a station.
arsta->rx_stats will be freed when a station is removed.
Redundant allocations are occurring when the same station is added
multiple times. This causes ath12k_mac_station_add() to be called
multiple times, and rx_stats is allocated each time. As a result there
is memory leaks.
Prevent multiple allocations of rx_stats when ath12k_mac_station_add()
is called repeatedly by checking if rx_stats is already allocated
before allocating again. Allocate arsta->rx_stats if arsta->rx_stats
is NULL respectively.
Tested-on: QCN9274 hw2.0 PCI WLAN.WBE.1.3.1-00173-QCAHKSWPL_SILICONZ-1
Tested-on: WCN7850 hw2.0 PCI WLAN.HMT.1.0.c5-00481-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Linux | Linux | 6.3 | 6.12.114 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | linux | 6.16.3-1 | — |
| Debian 13 | linux | 6.12.115-2 | — |
| Debian 12 | linux-6.12 | 6.12.115-2~deb12u1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Nvidia-BlueField 24.04 LTS | linux-bluefield | No fix yet | — |
| Ubuntu 25.10 | linux-azure-fde | No fix yet | — |
| Ubuntu 24.04 LTS | linux +28 | No fix yet | — |
| Ubuntu 24.04 LTS | linux-aws-6.14 +1 | 6.14.0-1015.15~24.04.1 | USN-7833-3, USN-7833-1 |
| Ubuntu 24.04 LTS | linux-azure-6.14 | 6.14.0-1014.14~24.04.1 | USN-7834-1 |
| Ubuntu 24.04 LTS | linux-azure-nvidia-6.14 | 6.14.0-1007.7 | USN-7834-1 |
| Ubuntu 24.04 LTS | linux-gcp-6.14 | 6.14.0-1018.19~24.04.1 | USN-7833-4 |
| Ubuntu 24.04 LTS | linux-hwe-6.14 | 6.14.0-34.34~24.04.1 | USN-7856-1 |
| Ubuntu 24.04 LTS | linux-oem-6.14 | 6.14.0-1014.14 | USN-7833-1 |
| Ubuntu 24.04 LTS | linux-riscv-6.14 | 6.14.0-34.34.1~24.04.1 | — |
| Ubuntu 22.04 LTS | linux-riscv +42 | No fix yet | — |
| Ubuntu 20.04 LTS | linux-gke +28 | No fix yet | — |
Show 5 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 18.04 LTS | linux-gcp +14 | No fix yet | — |
| Ubuntu 16.04 LTS | linux-hwe-edge | No fix yet | — |
| Ubuntu Pro Realtime 24.04 LTS | linux-realtime +1 | No fix yet | — |
| Ubuntu Pro Realtime 24.04 LTS | linux-realtime-6.14 | 6.14.0-1014.14~24.04.1 | USN-7833-2 |
| Ubuntu Pro Realtime 22.04 LTS | linux-realtime-6.8 | No fix yet | — |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-fips +3 | No fix yet | — |
Advisories 7
- WID-SEC-2025-1465 Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service BSI CERT-Bund (WID) · Nov 12, 2026
- USN-7833-2 linux-realtime-6.14 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7833-1 linux, linux-aws, linux-gcp, linux-oem-6.14, linux-oracle, linux-oracle-6.14, linux-raspi, linux-realtime vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7834-1 linux-azure, linux-azure-6.14, linux-azure-nvidia-6.14 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7833-4 linux-gcp-6.14 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7833-3 linux-aws-6.14 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7856-1 linux-hwe-6.14 vulnerabilities Ubuntu Security Notices (USN) · Jun 3, 2026