PT-2025-22204 · Linux+8 · Linux Kernel+8

Published

2025-02-28

·

Updated

2026-05-26

·

CVE-2025-37943

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A vulnerability in the Linux kernel has been identified, specifically in the wifi: ath12k module. The issue arises when hardware provides packets with a length greater than the maximum native Wi-Fi header length, potentially leading to invalid data access and memory corruption within the ath12k dp rx h undecap nwifi function for DP RX DECAP TYPE NATIVE WIFI decap type. A sanity check has been added to prevent invalid data access in the undecap native Wi-Fi function.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Memory Corruption

Buffer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

ALSA-2025:8643
BDU:2025-11813
CVE-2025-37943
ECHO-F9B6-B91D-EFA8
INFSA-2025_8643
OESA-2025-1572
OESA-2025-1573
RHSA-2025:8643
RHSA-2025:8669
RHSA-2025:9068
RHSA-2025_8643
SUSE-SU-2025:01964-1
SUSE-SU-2025:01965-1
SUSE-SU-2025:02000-1
SUSE-SU-2025:02254-1
SUSE-SU-2025:02307-1
SUSE-SU-2025:02333-1
SUSE-SU-2025:02923-1
SUSE-SU-2025:20408-1
SUSE-SU-2025:20413-1
SUSE-SU-2025:20419-1
SUSE-SU-2025:20421-1
SUSE-SU-2025_01964-1
SUSE-SU-2025_01965-1
SUSE-SU-2025_02000-1
SUSE-SU-2025_02254-1
SUSE-SU-2025_02307-1
SUSE-SU-2025_02333-1
USN-7594-1
USN-7594-2
USN-7594-3
USN-8028-1
USN-8028-2
USN-8028-3
USN-8028-4
USN-8028-5
USN-8028-6
USN-8028-7
USN-8028-8
USN-8031-1
USN-8031-2
USN-8031-3
USN-8052-1
USN-8052-2
USN-8074-1
USN-8074-2
USN-8126-1

Affected Products

Almalinux
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Hat
Rocky Linux
Suse
Ubuntu