Security readout for executives and security teams
Plain-English summary
A Linux ath12k Wi-Fi driver defect can fetch the wrong ring entry, potentially accessing incorrect memory and causing data corruption or crashes. The supplied CVSS score is 8.8, reflecting serious confidentiality, integrity, and availability consequences from an adjacent network position without credentials or user interaction.
Executive priority
Treat this as a high-priority kernel maintenance issue for ath12k-equipped systems, especially those operating near untrusted wireless devices. Accelerate supported kernel updates, but avoid declaring an emergency based on exploitation: the supplied evidence shows serious potential impact without confirming attacks in the wild.
Technical view
ath12k_dp_mon_srng_process incorrectly calls the source-ring accessor for a destination ring. Different pointer arithmetic and ring-management rules can produce invalid entries and memory accesses. The stable-kernel fix substitutes ath12k_hal_srng_dst_get_next_entry. The source bundle reports testing on QCN9274 and WCN7850 hardware.
Likely exposure
Exposure centers on Linux systems actively using the ath12k wireless driver. QCN9274 and WCN7850 were tested, but the sources do not establish that exposure is limited to them. The supplied affected-version list is ambiguous, so determine exposure through distribution advisories and fix-commit inclusion rather than version strings alone.
Exploitation context
The CVSS vector describes adjacent-network reachability, low complexity, no privileges, and no user interaction. However, the bundle provides no exploit demonstration, technical trigger details, or evidence of attacks. CISA KEV status is false, so active exploitation should not be claimed.
Researcher notes
The defect is an accessor mismatch between source and destination rings, corrected by a one-call substitution. Invalid pointer arithmetic may explain corruption or crashes, but the bundle does not establish exploitability beyond its CVSS assessment. Exact vulnerable branches should be mapped using the five stable commits and distribution backport records.
Mitigation direction
- Install a vendor-supported kernel update containing the referenced stable fix.
- Check Linux distribution advisories for the corrected package version.
- Prioritize systems using ath12k Wi-Fi in untrusted or shared wireless environments.
- If updating is delayed, consult the vendor for supported exposure-reduction measures.
Validation and detection
- Inventory Linux hosts, kernel builds, wireless chipsets, and ath12k driver usage.
- Confirm the installed kernel contains the applicable referenced stable fix commit.
- Review kernel logs and monitoring for ath12k crashes or unexplained memory corruption.
- Retest wireless monitoring and normal connectivity after updating.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-2025-37944 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- High
- CVSS
- 8.8 (3.1)
- Known Exploited
- No
- Published
Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS vector scores
1 official scoreWe collect every scored CVSS vector available in the official CNA and ADP containers. When more than one version is present, the table keeps the source vectors side by side instead of collapsing them into the highest score.
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H2.85.9LinuxVulnerability scoring details
Base CVSS 3.1 score
8.8HighVector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Vulnerability timeline
Timeline events are normalized from CVE metadata, CNA source timelines, ADP timelines, and KEV metadata when present.
- CVE reservedCVE Program
The CVE ID was reserved by the assigning CNA.
- CVE publishedCVE Program
The CVE record was published.
- CVE updatedCVE Program
The CVE record metadata indicates this as the latest update time.
Source materials
- CVE List V5 sourceCVE List V5
- https://git.kernel.org/stable/c/2c512f2eadabb1e80816116894ffaf7d802a944eCVE reference, Linux
- https://git.kernel.org/stable/c/ab7edf42ce800eb34d2f73dd7271b826661a06a5CVE reference, Linux
- https://git.kernel.org/stable/c/b6a3b2b2cead103089d3bb7a57d8209bdfa5399dCVE reference, Linux
- https://git.kernel.org/stable/c/298f0aea5cb32b5038f991f5db201a0fcbb9a31bCVE reference, Linux
- https://git.kernel.org/stable/c/63fdc4509bcf483e79548de6bc08bf3c8e504bb3CVE reference, Linux
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.