The vulnerability in the Linux kernel's ath12k WiFi driver arises from a NULL pointer dereference in the change_sta_links function when handling unready links. Specifically, if channel assignment fails, the virtual device creation is skipped, leaving internal pointers NULL. Subsequent operations that iterate over link maps and dereference these pointers without NULL checks cause kernel crashes. The fix involves checking the creation status of the virtual device before allocating and assigning link station structures, preventing broken links from entering the link map and avoiding NULL dereferences.

This vulnerability can cause kernel crashes (NULL pointer dereferences) during wireless station removal or key installation, leading to denial of service on affected systems. There is no indication of privilege escalation or data corruption beyond system instability. No known exploits in the wild have been reported.

A fix has been implemented in the Linux kernel to address this issue by adding proper checks before dereferencing pointers related to wireless links. Users should update to the fixed kernel versions once available. Patch status is not yet confirmed from the vendor advisory; check the official Linux kernel release notes or vendor advisories for the specific fixed versions and apply updates accordingly.