CVE-2025-37943: wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi
In the Linux kernel, the following vulnerability has been resolved:
wifi: ath12k: Fix invalid data access in ath12kdprxhundecapnwifi
In certain cases, hardware might provide packets with a length greater than the maximum native Wi-Fi header length. This can lead to accessing and modifying fields in the header within the ath12kdprxhundecapnwifi function for DPRXDECAPTYPENATIVEWIFI decap type and potentially resulting in invalid data access and memory corruption.
Add a sanity check before processing the SKB to prevent invalid data access in the undecap native Wi-Fi function for the DPRXDECAPTYPENATIVEWIFI decap type.
Tested-on: QCN9274 hw2.0 PCI WLAN.WBE.1.3.1-00173-QCAHKSWPLSILICONZ-1
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-37943?
The severity of CVE-2025-37943 is classified as moderate due to potential data access issues.
How do I fix CVE-2025-37943?
To fix CVE-2025-37943, update the Linux kernel to the latest version that includes the security patch.
What versions of Linux Kernel are affected by CVE-2025-37943?
CVE-2025-37943 affects specific versions of the Linux kernel that handle the ath12k driver.
What are the consequences of exploiting CVE-2025-37943?
Exploiting CVE-2025-37943 could lead to potential crashes or unauthorized access to system memory.
Is CVE-2025-37943 related to Wi-Fi security?
Yes, CVE-2025-37943 pertains to the handling of Wi-Fi packets in the Linux kernel, impacting Wi-Fi security.