CVE-2025-22128

Source
https://nvd.nist.gov/vuln/detail/CVE-2025-22128
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-22128.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-22128
Downstream
Related
Published
2025-04-16T14:13:10Z
Modified
2025-10-22T10:49:33.463371Z
Summary
wifi: ath12k: Clear affinity hint before calling ath12k_pci_free_irq() in error path
Details

In the Linux kernel, the following vulnerability has been resolved:

wifi: ath12k: Clear affinity hint before calling ath12kpcifree_irq() in error path

If a shared IRQ is used by the driver due to platform limitation, then the IRQ affinity hint is set right after the allocation of IRQ vectors in ath12kpcimsi_alloc(). This does no harm unless one of the functions requesting the IRQ fails and attempt to free the IRQ.

This may end up with a warning from the IRQ core that is expecting the affinity hint to be cleared before freeing the IRQ:

kernel/irq/manage.c:

/* make sure affinity_hint is cleaned up */
if (WARN_ON_ONCE(desc->affinity_hint))
    desc->affinity_hint = NULL;

So to fix this issue, clear the IRQ affinity hint before calling ath12kpcifree_irq() in the error path. The affinity will be cleared once again further down the error path due to code organization, but that does no harm.

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
a3012f206d07fa62b5c2e384cbc3a81a4dbba3c9
Fixed
a69a594794fcad96d4cfce12aab6c5014a12b4c8
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
a3012f206d07fa62b5c2e384cbc3a81a4dbba3c9
Fixed
35b33ba76765ce9e72949d957f3cf1feafd2955c
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
a3012f206d07fa62b5c2e384cbc3a81a4dbba3c9
Fixed
b43b1e2c52db77c872bd60d30cdcc72c47df70c7

Affected versions

v6.*

v6.10
v6.10-rc1
v6.10-rc2
v6.10-rc3
v6.10-rc4
v6.10-rc5
v6.10-rc6
v6.10-rc7
v6.11
v6.11-rc1
v6.11-rc2
v6.11-rc3
v6.11-rc4
v6.11-rc5
v6.11-rc6
v6.11-rc7
v6.12
v6.12-rc1
v6.12-rc2
v6.12-rc3
v6.12-rc4
v6.12-rc5
v6.12-rc6
v6.12-rc7
v6.12.1
v6.12.10
v6.12.11
v6.12.12
v6.12.13
v6.12.14
v6.12.15
v6.12.16
v6.12.17
v6.12.18
v6.12.19
v6.12.2
v6.12.20
v6.12.21
v6.12.22
v6.12.23
v6.12.24
v6.12.25
v6.12.26
v6.12.27
v6.12.28
v6.12.29
v6.12.3
v6.12.30
v6.12.31
v6.12.32
v6.12.33
v6.12.34
v6.12.4
v6.12.5
v6.12.6
v6.12.7
v6.12.8
v6.12.9
v6.13
v6.13-rc1
v6.13-rc2
v6.13-rc3
v6.13-rc4
v6.13-rc5
v6.13-rc6
v6.13-rc7
v6.14
v6.14-rc1
v6.14-rc2
v6.14-rc3
v6.14-rc4
v6.14-rc5
v6.14-rc6
v6.14-rc7
v6.14.1
v6.6
v6.6-rc6
v6.6-rc7
v6.7
v6.7-rc1
v6.7-rc2
v6.7-rc3
v6.7-rc4
v6.7-rc5
v6.7-rc6
v6.7-rc7
v6.7-rc8
v6.8
v6.8-rc1
v6.8-rc2
v6.8-rc3
v6.8-rc4
v6.8-rc5
v6.8-rc6
v6.8-rc7
v6.9
v6.9-rc1
v6.9-rc2
v6.9-rc3
v6.9-rc4
v6.9-rc5
v6.9-rc6
v6.9-rc7

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.8.0
Fixed
6.12.35
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.14.2