CVE-2025-39732wifi: ath11k: fix sleeping-in-atomic in ath11k_mac_op_set_bitrate_mask()
Updated under an hour ago ()
Does this affect you?
It affects Linux and 1 other product. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix sleeping-in-atomic in ath11k_mac_op_set_bitrate_mask() ath11k_mac_disable_peer_fixed_rate() is passed as the iterator to ieee80211_iterate_stations_atomic(). Note in this case the iterator is required to be atomic, however ath11k_mac_disable_peer_fixed_rate() does not follow it as it might sleep. Consequently below warning is seen: BUG: sleeping function called from invalid context at wmi.c:304 Call Trace: <TASK> dump_stack_lvl __might_resched.cold ath11k_wmi_cmd_send ath11k_wmi_set_peer_param ath11k_mac_disable_peer_fixed_rate ieee80211_iterate_stations_atomic ath11k_mac_op_set_bitrate_mask.cold Change to ieee80211_iterate_stations_mtx() to fix this issue. Tested-on: WCN6855 hw2.0 PCI WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.30
- CVSS
- 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Modified
- Record last updated
- Oct 15, 2026
- First seen by InfoSec Signals
- Oct 15, 2026
Affected products
Linux Linux linux:linux (from the name) | from d5c65159f2895379e11ca13f62feabe93278985d before 9c0e3144924c7db701575a73af341d33184afeaf; from d5c65159f2895379e11ca13f62feabe93278985d before 7d4d0db0dc9424de2bdc0b45e919e4892603356f; from d5c65159f2895379e11ca13f62feabe93278985d before 6bdef22d540258ca06f079f7b6ae100669a19b47; from d5c65159f2895379e11ca13f62feabe93278985d before 65c12b104cb942d588a1a093acc4537fb3d3b129 | CNA record |
linux linux_kernel linux:linux_kernel | from 5.6 before 6.12.42; from 6.13 before 6.15.10; from 6.16 before 6.16.1 | NVD |
References
- https://git.kernel.org/stable/c/9c0e3144924c7db701575a73af341d33184afeafpatch
- https://git.kernel.org/stable/c/7d4d0db0dc9424de2bdc0b45e919e4892603356fpatch
- https://git.kernel.org/stable/c/6bdef22d540258ca06f079f7b6ae100669a19b47patch
- https://git.kernel.org/stable/c/65c12b104cb942d588a1a093acc4537fb3d3b129patch
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.