CVE-2026-74367

A flaw was found in the ath12k Wi-Fi driver of the Linux kernel. This vulnerability arises from inconsistent internal state management during error conditions in virtual device creation. If an error occurs, the driver may not properly clear its internal state, leading to resource issues. This could potentially allow a local attacker to cause system instability or a denial of service.

This vulnerability is rated as Low severity because successful exploitation requires the presence of specific Qualcomm ath12k Wi-Fi hardware and local privileges to manage network interfaces. Enterprise server environments rarely deploy Wi-Fi adapters or load the corresponding driver by default, substantially restricting practical exposure. In systems equipped with the affected wireless adapter, the defect is only triggered during virtual interface creation failures, limiting the blast radius to a localized denial of service without compromising confidentiality or integrity.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.