{"id":"CVE-2025-37744","state":"PUBLISHED","title":"wifi: ath12k: fix memory leak in ath12k_pci_remove()","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: ath12k: fix memory leak in ath12k_pci_remove()\n\nKmemleak reported this error:\n\n  unreferenced object 0xffff1c165cec3060 (size 32):\n    comm \"insmod\", pid 560, jiffies 4296964570 (age 235.596s)\n    backtrace:\n      [<000000005434db68>] __kmem_cache_alloc_node+0x1f4/0x2c0\n      [<000000001203b155>] kmalloc_trace+0x40/0x88\n      [<0000000028adc9c8>] _request_firmware+0xb8/0x608\n      [<00000000cad1aef7>] firmware_request_nowarn+0x50/0x80\n      [<000000005011a682>] local_pci_probe+0x48/0xd0\n      [<00000000077cd295>] pci_device_probe+0xb4/0x200\n      [<0000000087184c94>] really_probe+0x150/0x2c0\n\nThe firmware memory was allocated in ath12k_pci_probe(), but not\nfreed in ath12k_pci_remove() in case ATH12K_FLAG_QMI_FAIL bit is\nset. So call ath12k_fw_unmap() to free the memory.\n\nTested-on: WCN7850 hw2.0 PCI WLAN.HMT.2.0-02280-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1","publishedAt":"2025-05-01T12:55:51.983Z","updatedAt":"2026-05-11T21:14:19.468Z","severity":null,"assigner":"Linux","products":["Linux Linux"],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"fc38e9339c47d704934bc74e55c331f0d2d88583","status":"affected","lessThan":"52e3132e62c31b5ade43dc4495fa81175e6e8398","versionType":"git"},{"version":"fc38e9339c47d704934bc74e55c331f0d2d88583","status":"affected","lessThan":"1b24394ed5c8a8d8f7b9e3aa9044c31495d46f2e","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/net/wireless/ath/ath12k/pci.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"6.14","status":"affected"},{"version":"0","status":"unaffected","lessThan":"6.14","versionType":"semver"},{"version":"6.14.3","status":"unaffected","lessThanOrEqual":"6.14.*","versionType":"semver"},{"version":"6.15","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/net/wireless/ath/ath12k/pci.c"]}],"references":["https://git.kernel.org/stable/c/52e3132e62c31b5ade43dc4495fa81175e6e8398","https://git.kernel.org/stable/c/1b24394ed5c8a8d8f7b9e3aa9044c31495d46f2e"],"weaknesses":[],"ingestedAt":"2026-10-29T20:09:03.054Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/37xxx/CVE-2025-37744.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2025-37744","state":"PUBLISHED","datePublished":"2025-05-01T12:55:51.983Z","dateUpdated":"2026-05-11T21:14:19.468Z","assignerShortName":"Linux","assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateReserved":"2025-04-16T04:51:23.936Z"},"containers":{"cna":{"title":"wifi: ath12k: fix memory leak in ath12k_pci_remove()","descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: ath12k: fix memory leak in ath12k_pci_remove()\n\nKmemleak reported this error:\n\n  unreferenced object 0xffff1c165cec3060 (size 32):\n    comm \"insmod\", pid 560, jiffies 4296964570 (age 235.596s)\n    backtrace:\n      [<000000005434db68>] __kmem_cache_alloc_node+0x1f4/0x2c0\n      [<000000001203b155>] kmalloc_trace+0x40/0x88\n      [<0000000028adc9c8>] _request_firmware+0xb8/0x608\n      [<00000000cad1aef7>] firmware_request_nowarn+0x50/0x80\n      [<000000005011a682>] local_pci_probe+0x48/0xd0\n      [<00000000077cd295>] pci_device_probe+0xb4/0x200\n      [<0000000087184c94>] really_probe+0x150/0x2c0\n\nThe firmware memory was allocated in ath12k_pci_probe(), but not\nfreed in ath12k_pci_remove() in case ATH12K_FLAG_QMI_FAIL bit is\nset. So call ath12k_fw_unmap() to free the memory.\n\nTested-on: WCN7850 hw2.0 PCI WLAN.HMT.2.0-02280-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1"}],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"fc38e9339c47d704934bc74e55c331f0d2d88583","status":"affected","lessThan":"52e3132e62c31b5ade43dc4495fa81175e6e8398","versionType":"git"},{"version":"fc38e9339c47d704934bc74e55c331f0d2d88583","status":"affected","lessThan":"1b24394ed5c8a8d8f7b9e3aa9044c31495d46f2e","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/net/wireless/ath/ath12k/pci.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"6.14","status":"affected"},{"version":"0","status":"unaffected","lessThan":"6.14","versionType":"semver"},{"version":"6.14.3","status":"unaffected","lessThanOrEqual":"6.14.*","versionType":"semver"},{"version":"6.15","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/net/wireless/ath/ath12k/pci.c"]}],"references":[{"url":"https://git.kernel.org/stable/c/52e3132e62c31b5ade43dc4495fa81175e6e8398"},{"url":"https://git.kernel.org/stable/c/1b24394ed5c8a8d8f7b9e3aa9044c31495d46f2e"}],"providerMetadata":{"shortName":"Linux","orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateUpdated":"2026-05-11T21:14:19.468Z"},"cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.14","versionEndExcluding":"6.14.3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.14","versionEndExcluding":"6.15"}]}]}],"x_generator":{"engine":"bippy-1.2.0"}}}}}