CVE-2023-54141: 
Linux Kernel vulnerability analysis and mitigation

CVE-2023-54141 is a NULL pointer dereference vulnerability in the Linux kernel's ath11k Wi-Fi driver, specifically affecting the IPQ5018 hardware platform. The flaw arises because the hw_ops->get_ring_selector() function pointer is not initialized for IPQ5018, causing a kernel panic when data transmission is attempted after clients connect. It was published on December 24, 2025, and affects the Linux kernel's ath11k module. The CVSS score and severity rating have not been publicly assigned at this time (Feedly, CVE.org).

The root cause is a missing initialization of the hw_ops->get_ring_selector() function pointer for the IPQ5018 Wi-Fi chipset in the Linux kernel's ath11k driver (CWE-476: NULL Pointer Dereference). When a wireless client connects and data transmission begins, the kernel calls hw_ops->get_ring_selector() via ath11k_dp_tx(), but since the pointer is NULL for IPQ5018, a kernel NULL pointer dereference occurs at virtual address 0x00000000. The crash trace shows the call chain: ath11k_dp_tx → ath11k_mac_op_tx → ieee80211_handle_wake_tx_queue → ieee80211_tx_prepare_skb → __ieee80211_subif_start_xmit. The fix involves adding the missing hw_ops->get_ring_selector() implementation for IPQ5018 (Feedly, kernel.org patch 1).

Successful triggering of this vulnerability causes a kernel panic (system crash), resulting in a complete denial of service on affected devices running Linux with the ath11k driver on IPQ5018 hardware. The crash is triggered locally or by any wireless client connecting and sending data, making it exploitable in any environment where IPQ5018-based access points or routers are deployed. There is no evidence of confidentiality or integrity impact; the primary consequence is availability loss (Feedly).

The fix is to apply the upstream Linux kernel patch that adds the missing hw_ops->get_ring_selector() for IPQ5018 in the ath11k driver. Three patch commits have been identified: c36289e, ce282d8, and d1992d7. Administrators running Linux on IPQ5018-based hardware (e.g., routers or access points using Qualcomm IPQ5018 SoCs) should update to a patched kernel version as soon as one is available from their distribution or vendor. As a temporary workaround, disabling the ath11k module or preventing wireless client associations on affected hardware can prevent the crash (Feedly).