Out-of-bounds Access Vulnerability in Linux Kernel's ath12k Component

CVE-2025-39761

What is CVE-2025-39761?

A vulnerability exists in the ath12k component of the Linux kernel where the Transmission Identifier (TID) is not decremented prior to peer cleanup during error handling in the RX peer fragment setup. This oversight can result in potential out-of-bounds access within the peer's rx_tid array, creating significant security risks. Proper decrementing of the TID is essential to ensure safe cleanup and prevent exploitation stemming from failed RX peer fragment setups. This issue was identified during a routine code review and has undergone compile testing.

References