Linux Kernel ath12k NULL Pointer Dereference Vulnerability in Channel Context Handler

A vulnerability in the Linux kernel's ath12k Wi-Fi driver has been fixed, addressing a NULL pointer dereference issue in the channel context assignment handler. The vulnerability arose because, when the function ath12k_mac_assign_vif_to_vdev() failed, the radio handle was incorrectly accessed from the link VIF handle for debug logging, despite the radio handle being NULL in such failure scenarios. This NULL access has been corrected by redirecting the logging to a hardware debug helper function. The vulnerability was present in the QCN9274 and WCN7850 hardware versions.

Impact

The vulnerability could lead to a NULL pointer dereference, causing a crash or undefined behavior in the kernel.