CVE-2025-37744
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
01/05/2025
Last modified:
05/11/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
wifi: ath12k: fix memory leak in ath12k_pci_remove()<br />
<br />
Kmemleak reported this error:<br />
<br />
unreferenced object 0xffff1c165cec3060 (size 32):<br />
comm "insmod", pid 560, jiffies 4296964570 (age 235.596s)<br />
backtrace:<br />
[] __kmem_cache_alloc_node+0x1f4/0x2c0<br />
[] kmalloc_trace+0x40/0x88<br />
[] _request_firmware+0xb8/0x608<br />
[] firmware_request_nowarn+0x50/0x80<br />
[] local_pci_probe+0x48/0xd0<br />
[] pci_device_probe+0xb4/0x200<br />
[] really_probe+0x150/0x2c0<br />
<br />
The firmware memory was allocated in ath12k_pci_probe(), but not<br />
freed in ath12k_pci_remove() in case ATH12K_FLAG_QMI_FAIL bit is<br />
set. So call ath12k_fw_unmap() to free the memory.<br />
<br />
Tested-on: WCN7850 hw2.0 PCI WLAN.HMT.2.0-02280-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
Impact
Base Score 3.x
5.50
Severity 3.x
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.14 (including) | 6.14.3 (excluding) |
To consult the complete list of CPE names with products and versions, see this page



