https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 20:34:44 +0000 https://vulnerability.circl.lu/vuln/cve-2025-39750 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>wifi: ath12k: Correct tid cleanup when tid setup fails</p> <p>Currently, if any error occurs during ath12k_dp_rx_peer_tid_setup(), the tid value is already incremented, even though the corresponding TID is not actually allocated. Proceed to ath12k_dp_rx_peer_tid_delete() starting from unallocated tid, which might leads to freeing unallocated TID and cause potential crash or out-of-bounds access.</p> <p>Hence, fix by correctly decrementing tid before cleanup to match only the successfully allocated TIDs.</p> <p>Also, remove tid-- from failure case of ath12k_dp_rx_peer_frag_setup(), as decrementing the tid before cleanup in loop will take care of this.</p> <p>Compile tested only.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>wifi: ath12k: Correct tid cleanup when tid setup fails</p> <p>Currently, if any error occurs during ath12k_dp_rx_peer_tid_setup(), the tid value is already incremented, even though the corresponding TID is not actually allocated. Proceed to ath12k_dp_rx_peer_tid_delete() starting from unallocated tid, which might leads to freeing unallocated TID and cause potential crash or out-of-bounds access.</p> <p>Hence, fix by correctly decrementing tid before cleanup to match only the successfully allocated TIDs.</p> <p>Also, remove tid-- from failure case of ath12k_dp_rx_peer_frag_setup(), as decrementing the tid before cleanup in loop will take care of this.</p> <p>Compile tested only.</p> https://vulnerability.circl.lu/vuln/cve-2025-39750