diff --git a/fw/wmi_services.h b/fw/wmi_services.h
index f6ceb0241374..6ce425b64fc8 100644
--- a/fw/wmi_services.h
+++ b/fw/wmi_services.h
@@ -439,6 +439,8 @@ typedef  enum  {
     WMI_SERVICE_BEACON_PROTECTION_SUPPORT = 244, /* Indicates FW supports WPA3 Beacon protection */
     WMI_SERVICE_EMA_AP_SUPPORT = 245, /* FW supports EMA AP feature */
     WMI_SERVICE_PEER_POWER_SAVE_DURATION_SUPPORT = 246, /* Support for adding Power save duration per client */
+    WMI_SERVICE_5_DOT_9GHZ_SUPPORT = 247, /* Indicates FW supports new 5.9GHZ (scan, connection and so on) */
+    WMI_SERVICE_MU_PREAMBLE_PUNCTURE_SUPPORT = 248, /* Indicates FW supports MU preamble puncture */
 
 
     /******* ADD NEW SERVICES UP TO 256 HERE *******/
diff --git a/fw/wmi_unified.h b/fw/wmi_unified.h
index 4f5ffdb160e9..3e89239a2ae5 100644
--- a/fw/wmi_unified.h
+++ b/fw/wmi_unified.h
@@ -5143,6 +5143,15 @@ typedef struct {
 #define WMI_TX_SEND_PARAM_CFR_CAPTURE_GET(tx_param_dword1) WMI_GET_BITS(tx_param_dword1, 21, 1)
 #define WMI_TX_SEND_PARAM_CFR_CAPTURE_SET(tx_param_dword1, value) WMI_SET_BITS(tx_param_dword1, 21, 1, value)
 
+/* TX_SEND flags:
+ * Bit 0: set wrong txkey
+ *     There is one special WFA test case in STA or AP, setting wrong txkey
+ *     in disassoc or deauth with PMF enabled to verify if peer disconnected
+ */
+#define WMI_TX_SEND_FLAG_SET_WRONG_KEY    0x00000001
+#define WMI_TX_SEND_FLAG_SET_WRONG_KEY_GET(tx_flags) WMI_GET_BITS(tx_flags, 0, 1)
+#define WMI_TX_SEND_FLAG_SET_WRONG_KEY_SET(tx_flags, value) WMI_SET_BITS(tx_flags, 0, 1, value)
+
 typedef struct {
     A_UINT32 tlv_header; /* TLV tag and len; tag equals WMITLV_TAG_STRUC_wmi_tx_send_params */
 
@@ -5306,6 +5315,12 @@ typedef struct {
      * frame, as it will be tx'ed on non-pause tid
      */
     A_UINT32 tx_params_valid;
+    /* tx_flags:
+     * Extra flags when tx_params_valid is 0.
+     * Refer to WMI_TX_SEND_FLAG_xxx defs regarding the meaning of the
+     * bits within this field.
+     */
+    A_UINT32 tx_flags;
 /* This TLV is followed by array of bytes: First 64 bytes of management frame
  *   A_UINT8 bufp[];
  */
diff --git a/fw/wmi_version.h b/fw/wmi_version.h
index e437dbf7ac21..70e0fedf73de 100644
--- a/fw/wmi_version.h
+++ b/fw/wmi_version.h
@@ -36,7 +36,7 @@
 #define __WMI_VER_MINOR_    0
 /** WMI revision number has to be incremented when there is a
  *  change that may or may not break compatibility. */
-#define __WMI_REVISION_ 824
+#define __WMI_REVISION_ 825
 
 /** The Version Namespace should not be normally changed. Only
  *  host and firmware of the same WMI namespace will work