CVE-2025-37897

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.124

Description A bug in the Linux kernel has been resolved, specifically in the wifi plfxlc module. The plfxlc mac release() function incorrectly asserts that mac->lock is held, which is not valid behavior. This assertion is incorrect because mac->lock cannot be held when the device is disconnected or during probe failure. The function modifies mac->flags atomically, and there is no need to hold mac->lock for plfxlc mac release(). This bug leads to a warning message.

Recommendations For Linux kernel versions prior to 6.1.124, update to version 6.1.124 or later to resolve the issue. As a temporary workaround, consider disabling the plfxlc mac release() function until a patch is available. Restrict access to the vulnerable module to minimize the risk of exploitation. Avoid using the mac->lock variable in the affected API endpoint until the issue is resolved.