CVE-2024-56543
wifi: ath12k: Skip Rx TID cleanup for self peer
Reported by linux · Published December 27, 2024
In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Skip Rx TID cleanup for self peer During peer create, dp setup for the peer is done where Rx TID is updated for all the TIDs. Peer object for self peer will not go through dp setup. When core halts, dp cleanup is done for all the peers. While cleanup, rx_tid::ab is accessed which causes below stack trace for self peer. WARNING: CPU: 6 PID: 12297 at drivers/net/wireless/ath/ath12k/dp_rx.c:851 Call Trace: __warn+0x7b/0x1a0 ath12k_dp_rx_frags_cleanup+0xd2/0xe0 [ath12k] report_bug+0x10b/0x200 handle_bug+0x3f/0x70 exc_invalid_op+0x13/0x60 asm_exc_invalid_op+0x16/0x20 ath12k_dp_rx_frags_cleanup+0xd2/0xe0 [ath12k] ath12k_dp_rx_frags_cleanup+0xca/0xe0 [ath12k] ath12k_dp_rx_peer_tid_cleanup+0x39/0xa0 [ath12k] ath12k_mac_peer_cleanup_all+0x61/0x100 [ath12k] ath12k_core_halt+0x3b/0x100 [ath12k] ath12k_core_reset+0x494/0x4c0 [ath12k] sta object in peer will be updated when remote peer is created. Hence use peer::sta to detect the self peer and skip the cleanup. Tested-on: QCN9274 hw2.0 PCI WLAN.WBE.1.0.1-00029-QCAHKSWPL_SILICONZ-1 Tested-on: WCN7850 hw2.0 PCI WLAN.HMT.1.0.c5-00481-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
EPSS 0.22% · 12.2th percentile
Fixed versions
Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.
| Package | Ecosystem | Fixed in |
|---|---|---|
| Linux | Linux | d73da0dd2853887b7aab71f0d572fd3314dafafe, a1e2d6738b29c74c2024eb23167dfff68aadd984, a052483d495a4dc62c814f2fd17d0ceb308fc6a6, 6.3, 1a0c640ce1cdcde3eb131a0c1e70ca1ed7cf27cb |
Risk scores
Affected products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | d889913205cf7ebda905b1e62c5867ed4e39f6c2, d889913205cf7ebda905b1e62c5867ed4e39f6c2, d889913205cf7ebda905b1e62c5867ed4e39f6c2 |
| Linux | Linux | 6.3, 0, 6.6.64 |
| Linux | Linux | 0, *, 6.6.64 |
| linux | linux_kernel | 6.3, 6.3, 6.3 |
Timeline
- Dec 27, 2024 CVE Published
- Dec 28, 2024 EPSS Score (30 in total, the first dated here)
- Oct 4, 2025 Coalition ESS Score (7 in total, the first dated here)
- Dec 16, 2025 PoC Published
- Dec 30, 2025 Security Advisory (434 in total, the first dated here)
- Apr 29, 2026 Distribution Patch (351 in total, the first dated here)
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln CVE-2024-56543
vulnetix vdb fixes CVE-2024-56543Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/CVE-2024-56543/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart