Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2025-39732— wifi: ath11k: fix sleeping-in-atomic in ath11k_mac_op_set_bitrate_mask()

Quick assessment

Affected
Linux Linux
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于原子上下文中调用睡眠函数，可能导致死锁。

CVSS 7.8 · High EPSS 0.16% · P4

Possible ATT&CK Techniques 1 AI

T1499 · Endpoint Denial of Service

Affected Version Matrix 12

VendorProduct Version RangeStatus
Linux Linux d5c65159f2895379e11ca13f62feabe93278985d< 1f45a710c82b29d4c501b1cb472dff68d59ecc8c affected
d5c65159f2895379e11ca13f62feabe93278985d< 9c0e3144924c7db701575a73af341d33184afeaf affected
d5c65159f2895379e11ca13f62feabe93278985d< 7d4d0db0dc9424de2bdc0b45e919e4892603356f affected
d5c65159f2895379e11ca13f62feabe93278985d< 6bdef22d540258ca06f079f7b6ae100669a19b47 affected
d5c65159f2895379e11ca13f62feabe93278985d< 65c12b104cb942d588a1a093acc4537fb3d3b129 affected
5.6 affected
< 5.6 unaffected
6.6.160≤ 6.6.* unaffected
… +4 more rows
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2025-39732

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
wifi: ath11k: fix sleeping-in-atomic in ath11k_mac_op_set_bitrate_mask()
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix sleeping-in-atomic in ath11k_mac_op_set_bitrate_mask() ath11k_mac_disable_peer_fixed_rate() is passed as the iterator to ieee80211_iterate_stations_atomic(). Note in this case the iterator is required to be atomic, however ath11k_mac_disable_peer_fixed_rate() does not follow it as it might sleep. Consequently below warning is seen: BUG: sleeping function called from invalid context at wmi.c:304 Call Trace: <TASK> dump_stack_lvl __might_resched.cold ath11k_wmi_cmd_send ath11k_wmi_set_peer_param ath11k_mac_disable_peer_fixed_rate ieee80211_iterate_stations_atomic ath11k_mac_op_set_bitrate_mask.cold Change to ieee80211_iterate_stations_mtx() to fix this issue. Tested-on: WCN6855 hw2.0 PCI WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.30
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于原子上下文中调用睡眠函数，可能导致死锁。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Linux Linux d5c65159f2895379e11ca13f62feabe93278985d ~ 1f45a710c82b29d4c501b1cb472dff68d59ecc8c -
Linux Linux 5.6 -

II. Public POCs for CVE-2025-39732

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2025-39732

请登录查看更多情报信息。

Same Patch Batch · Linux · 2025-09-07 · 7 CVEs total

CVE-2025-39734 Revert "fs/ntfs3: Replace inode_trylock with inode_lock"
CVE-2025-39733 team: replace team lock with rtnl lock
CVE-2025-39731 f2fs: vm_unmap_ram() may be called from an invalid context
CVE-2025-39729 crypto: ccp - Fix dereferencing uninitialized error pointer
CVE-2025-39730 NFS: Fix filehandle bounds checking in nfs_fh_to_dentry()
CVE-2025-39727 mm: swap: fix potential buffer overflow in setup_clusters()

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2025-39732

No comments yet

Leave a comment