CVE-2025-39732

CVE-2025-39732

High · published September 7, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
4.4
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

wifi: ath11k: fix sleeping-in-atomic in ath11k_mac_op_set_bitrate_mask()

ath11k_mac_disable_peer_fixed_rate() is passed as the iterator to

ieee80211_iterate_stations_atomic(). Note in this case the iterator is

required to be atomic, however ath11k_mac_disable_peer_fixed_rate() does

not follow it as it might sleep. Consequently below warning is seen:

BUG: sleeping function called from invalid context at wmi.c:304

Call Trace:

<TASK>

dump_stack_lvl

__might_resched.cold

ath11k_wmi_cmd_send

ath11k_wmi_set_peer_param

ath11k_mac_disable_peer_fixed_rate

ieee80211_iterate_stations_atomic

ath11k_mac_op_set_bitrate_mask.cold

Change to ieee80211_iterate_stations_mtx() to fix this issue.

Tested-on: WCN6855 hw2.0 PCI WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.30

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00156 · 4.4th percentile
Published
2025-09-07T20:15Z
Affected products (3)
ProductVersionsFixed in
linux/linux_kernel≥ 5.6, < 6.12.426.12.42
linux/linux_kernel≥ 6.13, < 6.15.106.15.10
linux/linux_kernel≥ 6.16, < 6.16.16.16.1
References (5)
EPSS history
Timeline
  • 07 SEP 15:16Z
    wifi: ath11k: fix sleeping-in-atomic in ath11k_mac_op_set_bitrate_mask()
    cvelistv5