Looking around iwlwifi, I've noticed that AC 3168 uses special NVM format marked as IWL_NVM_SDP (in 'const struct iwl_cfg iwl3168_2ac_cfg = {...}'). Could't such a configuration cause NULL pointer dereference in 'iwl_set_hw_address()' when 'nvm_hw' is an explicit NULL, that is, when called from 'iwl_parse_mei_nvm_data()'? Dmitry