Memory Leak Vulnerability in ath12k on Linux Kernel

CVE-2025-38199

What is CVE-2025-38199?

A memory leak vulnerability exists in the ath12k component of the Linux kernel that leads to redundant allocations of rx_stats when the same station is added multiple times. This bug results in increasing memory usage as the function ath12k_mac_station_add() is invoked repeatedly without freeing previously allocated resources. To mitigate this issue, the function should check for existing allocations of rx_stats before proceeding with new allocations, ensuring that memory management is handled efficiently and leaks are prevented.

References