CVE-2025-37744

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
01/05/2025
Last modified:
05/11/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> wifi: ath12k: fix memory leak in ath12k_pci_remove()<br /> <br /> Kmemleak reported this error:<br /> <br /> unreferenced object 0xffff1c165cec3060 (size 32):<br /> comm "insmod", pid 560, jiffies 4296964570 (age 235.596s)<br /> backtrace:<br /> [] __kmem_cache_alloc_node+0x1f4/0x2c0<br /> [] kmalloc_trace+0x40/0x88<br /> [] _request_firmware+0xb8/0x608<br /> [] firmware_request_nowarn+0x50/0x80<br /> [] local_pci_probe+0x48/0xd0<br /> [] pci_device_probe+0xb4/0x200<br /> [] really_probe+0x150/0x2c0<br /> <br /> The firmware memory was allocated in ath12k_pci_probe(), but not<br /> freed in ath12k_pci_remove() in case ATH12K_FLAG_QMI_FAIL bit is<br /> set. So call ath12k_fw_unmap() to free the memory.<br /> <br /> Tested-on: WCN7850 hw2.0 PCI WLAN.HMT.2.0-02280-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.14 (including) 6.14.3 (excluding)