diff --git a/target/inc/wmi_tlv_defs.h b/target/inc/wmi_tlv_defs.h
index 1ba64b490c..2dbe1edd3a 100644
--- a/target/inc/wmi_tlv_defs.h
+++ b/target/inc/wmi_tlv_defs.h
@@ -723,6 +723,7 @@ typedef enum {
 	WMITLV_TAG_STRUC_wmi_pdev_set_reorder_timeout_val_cmd_fixed_param,
 	WMITLV_TAG_STRUC_wmi_peer_set_rx_blocksize_cmd_fixed_param,
 	WMITLV_TAG_STRUC_WMI_PDEV_SET_WAKEUP_CONFIG_CMDID_fixed_param,
+	WMITLV_TAG_STRUC_wmi_tlv_buf_len_param,
 } WMITLV_TAG_ID;
 
 /*
@@ -1290,7 +1291,9 @@ WMITLV_CREATE_PARAM_STRUC(WMI_RMV_BCN_FILTER_CMDID);
 	WMITLV_ELEM(id,op,buf,len, WMITLV_TAG_ARRAY_STRUC, wmi_roam_offload_tlv_param, offload_param, WMITLV_SIZE_VAR)	\
 	WMITLV_ELEM(id,op,buf,len, WMITLV_TAG_ARRAY_STRUC, wmi_roam_11i_offload_tlv_param, offload_11i_param, WMITLV_SIZE_VAR)	\
 	WMITLV_ELEM(id,op,buf,len, WMITLV_TAG_ARRAY_STRUC, wmi_roam_11r_offload_tlv_param, offload_11r_param, WMITLV_SIZE_VAR) \
-	WMITLV_ELEM(id,op,buf,len, WMITLV_TAG_ARRAY_STRUC, wmi_roam_ese_offload_tlv_param, offload_ese_param, WMITLV_SIZE_VAR)
+	WMITLV_ELEM(id, op, buf, len, WMITLV_TAG_ARRAY_STRUC, wmi_roam_ese_offload_tlv_param, offload_ese_param, WMITLV_SIZE_VAR) \
+	WMITLV_ELEM(id, op, buf, len, WMITLV_TAG_ARRAY_STRUC, wmi_tlv_buf_len_param, assoc_ie_len_param, WMITLV_SIZE_VAR) \
+	WMITLV_ELEM(id, op, buf, len, WMITLV_TAG_ARRAY_BYTE, A_UINT8, assoc_ie_buf, WMITLV_SIZE_VAR)
 
 WMITLV_CREATE_PARAM_STRUC(WMI_ROAM_SCAN_MODE);
 
diff --git a/target/inc/wmi_unified.h b/target/inc/wmi_unified.h
index 4237f64097..ee856a6f66 100644
--- a/target/inc/wmi_unified.h
+++ b/target/inc/wmi_unified.h
@@ -539,7 +539,7 @@ typedef enum {
 	/** configure thresholds for MAWC */
 	WMI_ROAM_CONFIGURE_MAWC_CMDID,
 	/** configure MultiBand Operation(refer WFA MBO spec) parameter */
-	WMI_ROAM_SET_MBO_PARAM_CMDID,
+	WMI_ROAM_SET_MBO_PARAM_CMDID, /* DEPRECATED */
 
 	/** offload scan specific commands */
 	/** set offload scan AP profile   */
@@ -2489,6 +2489,24 @@ typedef struct {
 	A_UINT32 ie_data[1];
 } wmi_ie_data;
 
+/**
+ * TLV used for length/buffer
+ */
+typedef struct {
+	/**
+	 * TLV tag and len; tag equals
+	 * WMITLV_TAG_STRUC_wmi_tlv_buf_len_param
+	 */
+	A_UINT32 tlv_header;
+	A_UINT32 buf_len;       /** Length of buf */
+	/**
+	 * Following this structure is the TLV byte stream of buf
+	 * of length buf_len:
+	 * A_UINT8 buf[];
+	 *
+	 */
+} wmi_tlv_buf_len_param;
+
 typedef struct {
 	/** Len of the SSID */
 	A_UINT32 ssid_len;
@@ -14234,6 +14252,15 @@ typedef struct {
 	A_UINT32 qtimer_high;
 } wmi_vdev_tsf_report_event_fixed_param;
 
+/**
+ * ie_id values:
+ * 0 to 255 are used for individual IEEE802.11 Information Element types
+ */
+#define WMI_SET_VDEV_IE_ID_SCAN_SET_DEFAULT_IE 256
+
+/* source values: */
+#define WMI_SET_VDEV_IE_SOURCE_HOST     0x0
+
 typedef struct {
 	/** TLV tag and len; tag equals
 	 * WMITLV_TAG_STRUC_wmi_vdev_set_ie_cmd_fixed_param */
@@ -14244,6 +14271,8 @@ typedef struct {
 	A_UINT32 ie_id;
 	/* ie_len corresponds to num of bytes in ie_data[] */
 	A_UINT32 ie_len;
+	/** source of this command */
+	A_UINT32 ie_source; /* see WMI_SET_VDEV_IE_SOURCE_ defs */
 	/*
 	 * Following this structure is the TLV byte stream of ie data of length
 	 * buf_len:
@@ -14681,7 +14710,7 @@ typedef struct {
  *        1 - Allow to connect to MBO AP only
  * Bit 1-31 : reserved.
  */
-#define WMI_ROAM_MBO_FLAG_MBO_ONLY_MODE  (1<<0)
+#define WMI_ROAM_MBO_FLAG_MBO_ONLY_MODE  (1<<0) /* DEPRECATED */
 
 typedef struct {
 	/*
@@ -14695,7 +14724,7 @@ typedef struct {
 	A_UINT32 enable;
 	/** MBO flags, refer to definition of MBO flags*/
 	A_UINT32 flags;
-} wmi_roam_set_mbo_fixed_param;
+} wmi_roam_set_mbo_fixed_param; /* DEPRECATED */
 
 typedef struct {
 	/*
diff --git a/target/inc/wmi_version.h b/target/inc/wmi_version.h
index 1686b6f5dc..298387df02 100644
--- a/target/inc/wmi_version.h
+++ b/target/inc/wmi_version.h
@@ -36,7 +36,7 @@
 #define __WMI_VER_MINOR_    0
 /** WMI revision number has to be incremented when there is a
  *  change that may or may not break compatibility */
-#define __WMI_REVISION_ 274
+#define __WMI_REVISION_ 275
 
 /** The Version Namespace should not be normally changed. Only
  *  host and firmware of the same WMI namespace will work