CVE-2025-39750: wifi: ath12k: Correct tid cleanup when tid setup fails
In the Linux kernel, the following vulnerability has been resolved:
wifi: ath12k: Correct tid cleanup when tid setup fails
Currently, if any error occurs during ath12kdprxpeertidsetup(), the tid value is already incremented, even though the corresponding TID is not actually allocated. Proceed to ath12kdprxpeertiddelete() starting from unallocated tid, which might leads to freeing unallocated TID and cause potential crash or out-of-bounds access.
Hence, fix by correctly decrementing tid before cleanup to match only the successfully allocated TIDs.
Also, remove tid-- from failure case of ath12kdprxpeerfragsetup(), as decrementing the tid before cleanup in loop will take care of this.
Compile tested only.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-39750?
CVE-2025-39750 has not been assigned a specific severity level yet as it requires further evaluation.
How do I fix CVE-2025-39750?
To fix CVE-2025-39750, you should update to the latest version of the Linux kernel that includes the security patch for this vulnerability.
What systems are affected by CVE-2025-39750?
CVE-2025-39750 affects the Linux kernel, specifically impacting systems utilizing the ath12k driver.
What impact does CVE-2025-39750 have on system performance?
CVE-2025-39750 may cause issues in managing TID setup for the ath12k driver, potentially leading to performance degradation.
Is CVE-2025-39750 exploitable remotely?
CVE-2025-39750 may not be directly exploitable remotely as it pertains to driver functionality within the Linux kernel.