PT-2025-18424 · Linux+4 · Linux Kernel+4

Published 2025-01-26 · Updated 2026-04-20 · CVE-2025-37743

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak issue has been identified in the Linux kernel, specifically in the wifi driver ath12k. The driver uses monitor destination rings for extended statistics mode and standalone monitor mode. When the AP interface is enabled, only extended statistics mode is activated, and the driver subscribes to HAL RX MPDU START TLV in the filter configuration. However, the kzalloc for the mon mpdu object is not freed, leading to a memory leak. This issue occurs while enabling extended statistics mode in the driver.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

BDU:2026-01401

CVE-2025-37743

SUSE-SU-2025:02249-1

SUSE-SU-2025:02254-1

SUSE-SU-2025:02307-1

SUSE-SU-2025:02333-1

SUSE-SU-2025:02335-1

SUSE-SU-2025:02538-1

SUSE-SU-2025:02923-1

SUSE-SU-2025:20408-1

SUSE-SU-2025:20413-1

SUSE-SU-2025:20419-1

SUSE-SU-2025:20421-1

SUSE-SU-2025_02249-1

SUSE-SU-2025_02254-1

SUSE-SU-2025_02307-1

SUSE-SU-2025_02333-1

SUSE-SU-2025_02335-1

SUSE-SU-2025_02538-1

USN-7594-1

USN-7594-2

USN-7594-3

Affected Products

Astra Linux

Debian

Linux Kernel

Suse

Ubuntu

References · 1569

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/37xxx/CVE-2025-37743.json · Exploit
• https://ubuntu.com/security/CVE-2025-22046 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-37880 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-37942 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-37828 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-22035 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-37811 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-37740 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-37798 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-23149 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-37758 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-23147 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-37807 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:02335-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-37830 · Vendor Advisory