Memory Leak in Ath12k Service Ready Event for Linux Kernel

CVE-2025-39890

What is CVE-2025-39890?

A memory leak vulnerability has been identified in the ath12k driver of the Linux kernel. Specifically, the function ath12k_service_ready_ext_event fails to free the 'svc_rdy_ext.mac_phy_caps' structure when an error occurs, leading to unreferenced objects that remain in memory. This flaw can cause increased memory usage over time, potentially leading to system instability. The issue has been documented and addressed in updates to ensure proper memory management and the prevention of leaks during failure scenarios.

References