CVE-2025-23129

CVE-2025-23129

Medium · published April 16, 2025

CVSS v3.1
5.5
EPSS
0%
Percentile
7.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

wifi: ath11k: Clear affinity hint before calling ath11k_pcic_free_irq() in error path

If a shared IRQ is used by the driver due to platform limitation, then the

IRQ affinity hint is set right after the allocation of IRQ vectors in

ath11k_pci_alloc_msi(). This does no harm unless one of the functions

requesting the IRQ fails and attempt to free the IRQ. This results in the

below warning:

WARNING: CPU: 7 PID: 349 at kernel/irq/manage.c:1929 free_irq+0x278/0x29c

Call trace:

free_irq+0x278/0x29c

ath11k_pcic_free_irq+0x70/0x10c [ath11k]

ath11k_pci_probe+0x800/0x820 [ath11k_pci]

local_pci_probe+0x40/0xbc

The warning is due to not clearing the affinity hint before freeing the

IRQs.

So to fix this issue, clear the IRQ affinity hint before calling

ath11k_pcic_free_irq() in the error path. The affinity will be cleared once

again further down the error path due to code organization, but that does

no harm.

Tested-on: QCA6390 hw2.0 PCI WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00188 · 7.9th percentile
Published
2025-04-16T19:16Z
Affected products (3)
ProductVersionsFixed in
linux/linux_kernel≥ 6.1.63, < 6.26.2
linux/linux_kernel≥ 6.5.12, < 6.66.6
linux/linux_kernel≥ 6.6.2, < 6.14.26.14.2
References (5)
EPSS history
Timeline
  • 16 APR 14:13Z
    wifi: ath11k: Clear affinity hint before calling ath11k_pcic_free_irq() in error path
    cvelistv5