Invalid Memory Access in Linux Kernel's ath12k WLAN Driver

CVE-2025-37976

What is CVE-2025-37976?

A vulnerability in the Linux kernel's ath12k WLAN driver has been identified where an incorrect function call results in accessing invalid memory locations. The function ath12k_dp_mon_srng_process wrongly utilizes ath12k_hal_srng_src_get_next_entry for fetching entries from a destination ring, leading to potential data corruption and system crashes. This issue arises from the discrepancy in handling source and destination rings, causing improper pointer arithmetic. The fix involves substituting the faulty call with the appropriate ath12k_hal_srng_dst_get_next_entry function, thereby safeguarding against invalid memory accesses.

References