{"id":"CVE-2025-23129","state":"PUBLISHED","title":"wifi: ath11k: Clear affinity hint before calling ath11k_pcic_free_irq() in error path","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: ath11k: Clear affinity hint before calling ath11k_pcic_free_irq() in error path\n\nIf a shared IRQ is used by the driver due to platform limitation, then the\nIRQ affinity hint is set right after the allocation of IRQ vectors in\nath11k_pci_alloc_msi(). This does no harm unless one of the functions\nrequesting the IRQ fails and attempt to free the IRQ. This results in the\nbelow warning:\n\nWARNING: CPU: 7 PID: 349 at kernel/irq/manage.c:1929 free_irq+0x278/0x29c\nCall trace:\n free_irq+0x278/0x29c\n ath11k_pcic_free_irq+0x70/0x10c [ath11k]\n ath11k_pci_probe+0x800/0x820 [ath11k_pci]\n local_pci_probe+0x40/0xbc\n\nThe warning is due to not clearing the affinity hint before freeing the\nIRQs.\n\nSo to fix this issue, clear the IRQ affinity hint before calling\nath11k_pcic_free_irq() in the error path. The affinity will be cleared once\nagain further down the error path due to code organization, but that does\nno harm.\n\nTested-on: QCA6390 hw2.0 PCI WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1","publishedAt":"2025-04-16T14:13:11.663Z","updatedAt":"2026-09-14T11:57:57.901Z","severity":null,"assigner":"Linux","products":["Linux Linux"],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"e01b3400d641cb290742849331f0d22e1202538a","status":"affected","lessThan":"8d0519f511d93d675f61d6bfb45ffcc945af4b14","versionType":"git"},{"version":"d412d0ef300f28d698648cc7c19147ab413251fe","status":"affected","lessThan":"7493b9baf0e54b44caae46715aaa409a84bd9f4b","versionType":"git"},{"version":"39564b475ac5a589e6c22c43a08cbd283c295d2c","status":"affected","lessThan":"80dc5a2ce5b75d648e08549617f5c555d07ae43c","versionType":"git"},{"version":"39564b475ac5a589e6c22c43a08cbd283c295d2c","status":"affected","lessThan":"3fc42cfcc6e336f25dee79b34e57c4a63cd652a5","versionType":"git"},{"version":"39564b475ac5a589e6c22c43a08cbd283c295d2c","status":"affected","lessThan":"68410c5bd381a81bcc92b808e7dc4e6b9ed25d11","versionType":"git"},{"version":"5a9f55efa9333e3edb4826d945cfdd8356f6e269","status":"affected","versionType":"git"},{"version":"6.1.63","status":"affected","lessThan":"6.1.188","versionType":"semver"},{"version":"6.6.2","status":"affected","lessThan":"6.6.157","versionType":"semver"},{"version":"6.5.12","status":"affected","lessThan":"6.6","versionType":"semver"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/net/wireless/ath/ath11k/pci.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"6.7","status":"affected"},{"version":"0","status":"unaffected","lessThan":"6.7","versionType":"semver"},{"version":"6.1.188","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.6.157","status":"unaffected","lessThanOrEqual":"6.6.*","versionType":"semver"},{"version":"6.12.59","status":"unaffected","lessThanOrEqual":"6.12.*","versionType":"semver"},{"version":"6.14.2","status":"unaffected","lessThanOrEqual":"6.14.*","versionType":"semver"},{"version":"6.15","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/net/wireless/ath/ath11k/pci.c"]}],"references":["https://git.kernel.org/stable/c/8d0519f511d93d675f61d6bfb45ffcc945af4b14","https://git.kernel.org/stable/c/7493b9baf0e54b44caae46715aaa409a84bd9f4b","https://git.kernel.org/stable/c/80dc5a2ce5b75d648e08549617f5c555d07ae43c","https://git.kernel.org/stable/c/3fc42cfcc6e336f25dee79b34e57c4a63cd652a5","https://git.kernel.org/stable/c/68410c5bd381a81bcc92b808e7dc4e6b9ed25d11"],"weaknesses":[],"ingestedAt":"2026-10-29T20:08:39.238Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/23xxx/CVE-2025-23129.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2025-23129","state":"PUBLISHED","datePublished":"2025-04-16T14:13:11.663Z","dateUpdated":"2026-09-14T11:57:57.901Z","assignerShortName":"Linux","assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateReserved":"2025-01-11T14:28:41.510Z"},"containers":{"cna":{"title":"wifi: ath11k: Clear affinity hint before calling ath11k_pcic_free_irq() in error path","descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: ath11k: Clear affinity hint before calling ath11k_pcic_free_irq() in error path\n\nIf a shared IRQ is used by the driver due to platform limitation, then the\nIRQ affinity hint is set right after the allocation of IRQ vectors in\nath11k_pci_alloc_msi(). This does no harm unless one of the functions\nrequesting the IRQ fails and attempt to free the IRQ. This results in the\nbelow warning:\n\nWARNING: CPU: 7 PID: 349 at kernel/irq/manage.c:1929 free_irq+0x278/0x29c\nCall trace:\n free_irq+0x278/0x29c\n ath11k_pcic_free_irq+0x70/0x10c [ath11k]\n ath11k_pci_probe+0x800/0x820 [ath11k_pci]\n local_pci_probe+0x40/0xbc\n\nThe warning is due to not clearing the affinity hint before freeing the\nIRQs.\n\nSo to fix this issue, clear the IRQ affinity hint before calling\nath11k_pcic_free_irq() in the error path. The affinity will be cleared once\nagain further down the error path due to code organization, but that does\nno harm.\n\nTested-on: QCA6390 hw2.0 PCI WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1"}],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"e01b3400d641cb290742849331f0d22e1202538a","status":"affected","lessThan":"8d0519f511d93d675f61d6bfb45ffcc945af4b14","versionType":"git"},{"version":"d412d0ef300f28d698648cc7c19147ab413251fe","status":"affected","lessThan":"7493b9baf0e54b44caae46715aaa409a84bd9f4b","versionType":"git"},{"version":"39564b475ac5a589e6c22c43a08cbd283c295d2c","status":"affected","lessThan":"80dc5a2ce5b75d648e08549617f5c555d07ae43c","versionType":"git"},{"version":"39564b475ac5a589e6c22c43a08cbd283c295d2c","status":"affected","lessThan":"3fc42cfcc6e336f25dee79b34e57c4a63cd652a5","versionType":"git"},{"version":"39564b475ac5a589e6c22c43a08cbd283c295d2c","status":"affected","lessThan":"68410c5bd381a81bcc92b808e7dc4e6b9ed25d11","versionType":"git"},{"version":"5a9f55efa9333e3edb4826d945cfdd8356f6e269","status":"affected","versionType":"git"},{"version":"6.1.63","status":"affected","lessThan":"6.1.188","versionType":"semver"},{"version":"6.6.2","status":"affected","lessThan":"6.6.157","versionType":"semver"},{"version":"6.5.12","status":"affected","lessThan":"6.6","versionType":"semver"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/net/wireless/ath/ath11k/pci.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"6.7","status":"affected"},{"version":"0","status":"unaffected","lessThan":"6.7","versionType":"semver"},{"version":"6.1.188","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.6.157","status":"unaffected","lessThanOrEqual":"6.6.*","versionType":"semver"},{"version":"6.12.59","status":"unaffected","lessThanOrEqual":"6.12.*","versionType":"semver"},{"version":"6.14.2","status":"unaffected","lessThanOrEqual":"6.14.*","versionType":"semver"},{"version":"6.15","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/net/wireless/ath/ath11k/pci.c"]}],"references":[{"url":"https://git.kernel.org/stable/c/8d0519f511d93d675f61d6bfb45ffcc945af4b14"},{"url":"https://git.kernel.org/stable/c/7493b9baf0e54b44caae46715aaa409a84bd9f4b"},{"url":"https://git.kernel.org/stable/c/80dc5a2ce5b75d648e08549617f5c555d07ae43c"},{"url":"https://git.kernel.org/stable/c/3fc42cfcc6e336f25dee79b34e57c4a63cd652a5"},{"url":"https://git.kernel.org/stable/c/68410c5bd381a81bcc92b808e7dc4e6b9ed25d11"}],"providerMetadata":{"shortName":"Linux","orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateUpdated":"2026-09-14T11:57:57.901Z"},"cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.1.63","versionEndExcluding":"6.1.188"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.6.2","versionEndExcluding":"6.6.157"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.7","versionEndExcluding":"6.12.59"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.7","versionEndExcluding":"6.14.2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.7","versionEndExcluding":"6.15"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.5.12"}]}]}],"x_generator":{"engine":"bippy-1.2.0"}}}}}