PT-2025-18424

CVE-2025-37743

·

Published

2025-01-26

·

Updated

2026-10-21

Description by

CVSS 4.0
7.1
High
MetricsAV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A memory leak issue has been identified in the Linux kernel, specifically in the wifi driver ath12k. The driver uses monitor destination rings for extended statistics mode and standalone monitor mode. When the AP interface is enabled, only extended statistics mode is activated, and the driver subscribes to HAL RX MPDU START TLV in the filter configuration. However, the kzalloc for the mon mpdu object is not freed, leading to a memory leak. This issue occurs while enabling extended statistics mode in the driver.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Related identifiers
CLSA-2026-1789986443
SUSE-SU-2025:02249-1
SUSE-SU-2025_02249-1
SUSE-SU-2025:02254-1
SUSE-SU-2025_02254-1
SUSE-SU-2025:02307-1
SUSE-SU-2025_02307-1
SUSE-SU-2025:02333-1
SUSE-SU-2025_02333-1
SUSE-SU-2025:02335-1
SUSE-SU-2025_02335-1
SUSE-SU-2025:02538-1
SUSE-SU-2025_02538-1
SUSE-SU-2025:02923-1
SUSE-SU-2025:20408-1
SUSE-SU-2025:20413-1
SUSE-SU-2025:20419-1
SUSE-SU-2025:20421-1
USN-7594-1
USN-7594-2
USN-7594-3
Found an issue in the description? Have something to add? Feel free to write us 👾