Linux Kernel ath12k Use-After-Free Vulnerability in Core Initialization

A use-after-free vulnerability has been identified in the Linux kernel's ath12k wireless driver. This issue arises in the ath12k_core_init() function, where the notifier chain is not properly unregistered if ath12k_core_hw_group_assign() or ath12k_core_hw_group_create() fails. As a result, the memory for the notifier chain is freed after the module is removed, potentially leading to a use-after-free condition if there is a subsequent access to the notifier chain.

Impact

Exploitation of this vulnerability can lead to a use-after-free condition, which may be exploited to execute arbitrary code or cause a denial-of-service condition.