diff --git a/drivers/wifi/nrfwifi/Kconfig.nrfwifi b/drivers/wifi/nrfwifi/Kconfig.nrfwifi
index 36935ed8ba1..7087e20beb6 100644
--- a/drivers/wifi/nrfwifi/Kconfig.nrfwifi
+++ b/drivers/wifi/nrfwifi/Kconfig.nrfwifi
@@ -661,6 +661,7 @@ config NRF_WIFI_AP_DEAD_DETECT_TIMEOUT
 config NRF_WIFI_RPU_RECOVERY
 	bool "RPU recovery mechanism"
 	depends on NRF_WIFI_LOW_POWER
+	default y
 	select EXPERIMENTAL
 	help
 		Enable RPU recovery mechanism to recover from RPU (nRF70) hang.
diff --git a/drivers/wifi/nrfwifi/src/net_if.c b/drivers/wifi/nrfwifi/src/net_if.c
index a4404cfb1a7..19b232b6fe3 100644
--- a/drivers/wifi/nrfwifi/src/net_if.c
+++ b/drivers/wifi/nrfwifi/src/net_if.c
@@ -877,7 +877,7 @@ int nrf_wifi_if_stop_zep(const struct device *dev)
 	}
 
 	rpu_ctx_zep = vif_ctx_zep->rpu_ctx_zep;
-	if (!rpu_ctx_zep) {
+	if (!rpu_ctx_zep || !rpu_ctx_zep->rpu_ctx) {
 		LOG_ERR("%s: rpu_ctx_zep is NULL",
 			__func__);
 		goto unlock;
@@ -980,10 +980,23 @@ int nrf_wifi_if_get_config_zep(const struct device *dev,
 		goto unlock;
 	}
 
+	memset(config, 0, sizeof(struct ethernet_config));
+
 	if (type == ETHERNET_CONFIG_TYPE_TXINJECTION_MODE) {
 		config->txinjection_mode =
 			def_dev_ctx->vif_ctx[vif_ctx_zep->vif_idx]->txinjection_mode;
 	}
+#ifdef CONFIG_NRF70_TCP_IP_CHECKSUM_OFFLOAD
+	if (type  == ETHERNET_CONFIG_TYPE_TX_CHECKSUM_SUPPORT ||
+	    type == ETHERNET_CONFIG_TYPE_RX_CHECKSUM_SUPPORT) {
+		config->chksum_support = ETHERNET_CHECKSUM_SUPPORT_IPV4_HEADER |
+					 ETHERNET_CHECKSUM_SUPPORT_IPV4_ICMP |
+					 ETHERNET_CHECKSUM_SUPPORT_IPV6_HEADER |
+					 ETHERNET_CHECKSUM_SUPPORT_IPV6_ICMP |
+					 ETHERNET_CHECKSUM_SUPPORT_TCP |
+					 ETHERNET_CHECKSUM_SUPPORT_UDP;
+	}
+#endif
 	ret = 0;
 unlock:
 	k_mutex_unlock(&vif_ctx_zep->vif_lock);
diff --git a/drivers/wifi/nrfwifi/src/qspi/src/spi_if.c b/drivers/wifi/nrfwifi/src/qspi/src/spi_if.c
index 2cdf3662fd5..4bf9f464391 100644
--- a/drivers/wifi/nrfwifi/src/qspi/src/spi_if.c
+++ b/drivers/wifi/nrfwifi/src/qspi/src/spi_if.c
@@ -58,6 +58,7 @@ static int spim_xfer_rx(unsigned int addr, void *data, unsigned int len, unsigne
 		addr & 0xFF,
 		0 /* dummy byte */
 	};
+	uint8_t discard[sizeof(hdr) + 2 * 4];
 
 	const struct spi_buf tx_buf[] = {
 		{.buf = hdr,  .len = sizeof(hdr) },
@@ -67,12 +68,17 @@ static int spim_xfer_rx(unsigned int addr, void *data, unsigned int len, unsigne
 	const struct spi_buf_set tx = { .buffers = tx_buf, .count = 2 };
 
 	const struct spi_buf rx_buf[] = {
-		{.buf = NULL,  .len = sizeof(hdr) + discard_bytes},
+		{.buf = discard,  .len = sizeof(hdr) + discard_bytes},
 		{.buf = data, .len = len },
 	};
 
 	const struct spi_buf_set rx = { .buffers = rx_buf, .count = 2 };
 
+	if (rx_buf[0].len > sizeof(discard)) {
+		LOG_ERR("Discard bytes too large, please adjust buf size");
+		return -EINVAL;
+	}
+
 	return spi_transceive_dt(&spi_spec, &tx, &rx);
 }
 
diff --git a/west.yml b/west.yml
index ccc137c1079..7aec642cf8a 100644
--- a/west.yml
+++ b/west.yml
@@ -188,7 +188,7 @@ manifest:
       groups:
         - hal
     - name: hal_nordic
-      revision: 0a753f99ea4899cfbb56e29ae40b4ded95a3ab77
+      revision: 2d78179cc4f0601a891553132b13184fa51b6ef9
       path: modules/hal/nordic
       groups:
         - hal