Linux Kernel ath11k Warning in Power Management Transition Vulnerability

Vulnerability

A vulnerability in the Linux kernel's ath11k driver has been addressed, which involved a warning during power management transitions. This issue arose when simulating a firmware crash on certain hardware versions, leading to a warning about the device's wake state not being properly managed. The root cause was identified as a missed synchronization in the device's power management state during recovery, which was exacerbated by a recent change in the MHI bus core. The vulnerability has been resolved by adding checks to the ath11k PCI read and write functions to ensure proper handling of the device's wake state, thereby eliminating the warning.

Impact

The vulnerability could lead to improper management of the device's power state, potentially causing issues in the device's operation or recovery process.

Reproduction

The vulnerability can be reproduced by simulating a firmware crash on a device using the ath11k driver, specifically on the WCN6855 hardware version 2.0. This can be done by writing 'assert' to the appropriate debug filesystem path to simulate a crash, which will trigger a warning about the hardware restart and the power management transition.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
0.0
exploitability
5.7
remediation
0.0
relevance
0.0
threat
4.8
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.