CVE-2025-37943: linux Out-of-bounds Write
Vulnerability summary
CVE-2025-37943 is a high (CVSS 8.8) Out-of-bounds Write vulnerability in linux. EPSS estimates a 0.26% chance of exploitation in the next 30 days, higher than 16.8% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 33 · Related 30Timeline
- 20-05-2025PublishedVulnerability first disclosed.
- 05-08-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi In certain cases, hardware might provide packets with a length greater than the maximum native Wi-Fi header length. This can lead to accessing and modifying fields in the header within the ath12k_dp_rx_h_undecap_nwifi function for DP_RX_DECAP_TYPE_NATIVE_WIFI decap type and potentially resulting in invalid data access and memory corruption. Add a sanity check before processing the SKB to prevent invalid data access in the undecap native Wi-Fi function for the DP_RX_DECAP_TYPE_NATIVE_WIFI decap type. Tested-on: QCN9274 hw2.0 PCI WLAN.WBE.1.3.1-00173-QCAHKSWPL_SILICONZ-1
CVSS metrics
6 scores · 5 sources · 2 versions- OSV · Red hatEcosystem advisory · calculated7.0HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:HDiffers
- OSV · UbuntuEcosystem advisory · calculated8.8HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HDiffers
- NVDNIST7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HDiffers
EPSS trend
Probability
0.26%
Chance of exploitation in the next 30 days
Percentile
17%
Versus all other CVEs
30-day change
-0.02 pp
From 0.28% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Ubuntu112 products
- linux< 6.8.0-100.100
- linux-allwinner-5.19All versions (No fix recorded)
- linux-aws< 6.8.0-1046.49
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Redhat3 products
- kpatch-patch-5_14_0-570_17_1< 0:1-1.el9_6
- kpatch-patch-5_14_0-570_17_1-debuginfo< 0:1-1.el9_6
- kpatch-patch-5_14_0-570_17_1-debugsource< 0:1-1.el9_6
Linux2 products
- linux≥ d889913205cf7ebda905b1e62c5867ed4e39f6c2, < 7f1d986da5c6abb75ffe4d0d325fc9b341c41a1c | ≥ d889913205cf7ebda905b1e62c5867ed4e39f6c2, < 3abe15e756481c45f6acba3d476cb3ca4afc3b61 | ≥ d889913205cf7ebda905b1e62c5867ed4e39f6c2, < 6ee653194ddb83674913fd2727b8ecfae0597ade | ≥ d889913205cf7ebda905b1e62c5867ed4e39f6c2, < 50be1fb76556e80af9f5da80f28168b6c71bce58 | ≥ d889913205cf7ebda905b1e62c5867ed4e39f6c2, < 9a0dddfb30f120db3851627935851d262e4e7acb | 6.3
- linux_kernel≥ 6.3, < 6.6.88 | ≥ 6.7, < 6.12.24 | ≥ 6.13, < 6.13.12 | ≥ 6.14, < 6.14.3
Debian1 product
- linux< 6.12.25-1
4 vendors · 118 products
