Peer Lookup Issue in Linux Kernel WiFi Component by Atheros

CVE-2025-40131

What is CVE-2025-40131?

A vulnerability in the ath12k component of the Linux kernel arises from an incorrect peer lookup mechanism during monitor mode. Specifically, the rxcb->peer_id is not updated with a valid identifier, leading to failures in retrieving peer metadata when data frames are processed. This may trigger warning messages in mac80211 as it encounters associated stations with invalid link identifiers. A patch has been implemented to utilize ppduinfo->peer_id, ensuring correct peer identification and proper update of link metadata.

References