CVE-2026-74367

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the ath12k mac vdev create() function where three error path failures can leave the arvif state inconsistent. First, if ath12k wmi vdev create() fails, the function returns without clearing arvif->ar, causing subsequent checks to incorrectly indicate vdev readiness. Second, if ath12k wmi send peer delete cmd() fails during err peer del, the system skips DP peer cleanup and vdev rollback, leaving num created vdevs, vdev maps, and arvif list membership active. Third, if ath12k wait for peer delete done() fails, the system skips the DP peer cleanup. These issues are addressed by redirecting failure paths to ensure proper DP peer cleanup, vdev rollback, and arvif state consolidation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.