<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 01 Oct 2026 19:56:34 +0000</lastBuildDate>
    <item>
      <title>CVE-2023-54141 — wifi: ath11k: Add missing hw_ops-&gt;get_ring_selector() for IPQ5018</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2023-54141</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Linux&lt;/p&gt;
&lt;p&gt;In the Linux kernel, the following vulnerability has been resolved:&lt;/p&gt;
&lt;p&gt;wifi: ath11k: Add missing hw_ops-&amp;gt;get_ring_selector() for IPQ5018&lt;/p&gt;
&lt;p&gt;During sending data after clients connected, hw_ops-&amp;gt;get_ring_selector()
will be called. But for IPQ5018, this member isn&amp;#39;t set, and the
following NULL pointer exception will be occurred:&lt;/p&gt;
&lt;p&gt;[   38.840478] 8&amp;lt;--- cut here ---
	[   38.840517] Unable to handle kernel NULL pointer dereference at virtual address 00000000
	...
	[   38.923161] PC is at 0x0
	[   38.927930] LR is at ath11k_dp_tx+0x70/0x730 [ath11k]
	...
	[   39.063264] Process hostapd (pid: 1034, stack limit = 0x801ceb3d)
	[   39.068994] Stack: (0x856a9a68 to 0x856aa000)
	...
	[   39.438467] [&amp;lt;7f323804&amp;gt;] (ath11k_dp_tx [ath11k]) from [&amp;lt;7f314e6c&amp;gt;] (ath11k_mac_op_tx+0x80/0x190 [ath11k])
	[   39.446607] [&amp;lt;7f314e6c&amp;gt;] (ath11k_mac_op_tx [ath11k]) from [&amp;lt;7f17dbe0&amp;gt;] (ieee80211_handle_wake_tx_queue+0x7c/0xc0 [mac80211])
	[   39.456162] [&amp;lt;7f17dbe0&amp;gt;] (ieee80211_handle_wake_tx_queue [mac80211]) from [&amp;lt;7f174450&amp;gt;] (ieee80211_probereq_get+0x584/0x704 [mac80211])
	[   39.467443] [&amp;lt;7f174450&amp;gt;] (ieee80211_probereq_get [mac80211]) from [&amp;lt;7f178c40&amp;gt;] (ieee80211_tx_prepare_skb+0x1f8/0x248 [mac80211])
	[   39.479334] [&amp;lt;7f178c40&amp;gt;] (ieee80211_tx_prepare_skb [mac80211]) from [&amp;lt;7f179e28&amp;gt;] (__ieee80211_subif_start_xmit+0x32c/0x3d4 [mac80211])
	[   39.491053] [&amp;lt;7f179e28&amp;gt;] (__ieee80211_subif_start_xmit [mac80211]) from [&amp;lt;7f17af08&amp;gt;] (ieee80211_tx_control_port+0x19c/0x288 [mac80211])
	[   39.502946] [&amp;lt;7f17af08&amp;gt;] (ieee…&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Linux&lt;/p&gt;
&lt;p&gt;In the Linux kernel, the following vulnerability has been resolved:&lt;/p&gt;
&lt;p&gt;wifi: ath11k: Add missing hw_ops-&amp;gt;get_ring_selector() for IPQ5018&lt;/p&gt;
&lt;p&gt;During sending data after clients connected, hw_ops-&amp;gt;get_ring_selector()
will be called. But for IPQ5018, this member isn&amp;#39;t set, and the
following NULL pointer exception will be occurred:&lt;/p&gt;
&lt;p&gt;[   38.840478] 8&amp;lt;--- cut here ---
	[   38.840517] Unable to handle kernel NULL pointer dereference at virtual address 00000000
	...
	[   38.923161] PC is at 0x0
	[   38.927930] LR is at ath11k_dp_tx+0x70/0x730 [ath11k]
	...
	[   39.063264] Process hostapd (pid: 1034, stack limit = 0x801ceb3d)
	[   39.068994] Stack: (0x856a9a68 to 0x856aa000)
	...
	[   39.438467] [&amp;lt;7f323804&amp;gt;] (ath11k_dp_tx [ath11k]) from [&amp;lt;7f314e6c&amp;gt;] (ath11k_mac_op_tx+0x80/0x190 [ath11k])
	[   39.446607] [&amp;lt;7f314e6c&amp;gt;] (ath11k_mac_op_tx [ath11k]) from [&amp;lt;7f17dbe0&amp;gt;] (ieee80211_handle_wake_tx_queue+0x7c/0xc0 [mac80211])
	[   39.456162] [&amp;lt;7f17dbe0&amp;gt;] (ieee80211_handle_wake_tx_queue [mac80211]) from [&amp;lt;7f174450&amp;gt;] (ieee80211_probereq_get+0x584/0x704 [mac80211])
	[   39.467443] [&amp;lt;7f174450&amp;gt;] (ieee80211_probereq_get [mac80211]) from [&amp;lt;7f178c40&amp;gt;] (ieee80211_tx_prepare_skb+0x1f8/0x248 [mac80211])
	[   39.479334] [&amp;lt;7f178c40&amp;gt;] (ieee80211_tx_prepare_skb [mac80211]) from [&amp;lt;7f179e28&amp;gt;] (__ieee80211_subif_start_xmit+0x32c/0x3d4 [mac80211])
	[   39.491053] [&amp;lt;7f179e28&amp;gt;] (__ieee80211_subif_start_xmit [mac80211]) from [&amp;lt;7f17af08&amp;gt;] (ieee80211_tx_control_port+0x19c/0x288 [mac80211])
	[   39.502946] [&amp;lt;7f17af08&amp;gt;] (ieee…&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2023-54141</guid>
    </item>
  </channel>
</rss>
