Riskcovery

CVE-2025-38292

wifi: ath12k: fix invalid access to memory

State
Published
Severity
8.8 High
Published
Jul 10, 2025
Updated
Oct 21, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: ath12k: fix invalid access to memory

In ath12k_dp_rx_msdu_coalesce(), rxcb is fetched from skb and boolean is_continuation is part of rxcb. Currently, after freeing the skb, the rxcb->is_continuation accessed again which is wrong since the memory is already freed. This might lead use-after-free error.

Hence, fix by locally defining bool is_continuation from rxcb, so that after freeing skb, is_continuation can be used.

Compile tested only.

Scores

CVSSScoreVectorSource
3.18.8 HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • d889913205cf7ebda905b1e62c5867ed4e39f6c2 to before 920c2db46ca4476c25ec52758441e2e7ab498b0fAffected
  • d889913205cf7ebda905b1e62c5867ed4e39f6c2 to before 371b340affa52f280f6eadfd25fbd43f09f0d5c0Affected
  • d889913205cf7ebda905b1e62c5867ed4e39f6c2 to before 5f09d16cd57764c95c8548fe5b70672c9ac01127Affected
  • d889913205cf7ebda905b1e62c5867ed4e39f6c2 to before 9f17747fbda6fca934854463873c4abf8061491dAffected
LinuxLinux
  • 6.3Affected
  • before 6.3Not affected
  • 6.6.160 through 6.6.*Not affected
  • 6.12.34 through 6.12.*Not affected
  • 6.15.3 through 6.15.*Not affected
  • 6.16 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.