Linux Kernel ath12k Read-After-Free Vulnerability in VIF Assignment

A read-after-free vulnerability has been identified in the Linux kernel's ath12k Wi-Fi driver. The issue arises in the function ath12k_mac_assign_vif_to_vdev(), where a virtual interface (VIF) assigned to one radio is deleted from that radio, freeing the associated pointer. If this pointer is subsequently checked before being reassigned, it creates a read-after-free condition. The vulnerability has been fixed by rearranging the code to ensure the pointer is reassigned before any checks are made.

Impact

Exploitation of this vulnerability could lead to memory corruption issues, potentially allowing for arbitrary code execution or other unintended behavior.