CVE-2026-68362

A flaw was found in the ath11k Wi-Fi driver for the Linux kernel. During the firmware ready process, the driver incorrectly sets a flag indicating successful initialization even when the process fails. This inconsistent state can lead to a NULL pointer dereference when the driver attempts a subsequent restart, potentially causing a system crash or denial of service.

This issue affects Qualcomm ath11k Wi-Fi. ATH11K_FLAG_REGISTERED is set even when firmware ready fails, leading to NULL deref in SRNG access. Systems without ath11k hardware are not affected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the ath11k module from loading. See https://access.redhat.com/solutions/41278 for instructions.