{"id":"CVE-2025-23129","title":"wifi: ath11k: Clear affinity hint before calling ath11k_pcic_free_irq() in error path","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: ath11k: Clear affinity hint before calling ath11k_pcic_free_irq() in error path\n\nIf a shared IRQ is used by the driver due to platform limitation, then the\nIRQ af…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= e01b3400d641cb290742849331f0d22e1202538a < 8d0519f511d93d675f61d6bfb45ffcc945af4b14","Linux >= d412d0ef300f28d698648cc7c19147ab413251fe < 7493b9baf0e54b44caae46715aaa409a84bd9f4b","Linux >= 39564b475ac5a589e6c22c43a08cbd283c295d2c < 80dc5a2ce5b75d648e08549617f5c555d07ae43c","Linux >= 39564b475ac5a589e6c22c43a08cbd283c295d2c < 3fc42cfcc6e336f25dee79b34e57c4a63cd652a5","Linux >= 39564b475ac5a589e6c22c43a08cbd283c295d2c < 68410c5bd381a81bcc92b808e7dc4e6b9ed25d11","Linux 5a9f55efa9333e3edb4826d945cfdd8356f6e269","Linux >= 6.1.63 < 6.1.188","Linux >= 6.6.2 < 6.6.157","Linux >= 6.5.12 < 6.6","Linux 6.7"],"published":"2025-04-16","updated":"2026-09-14","sourceUpdated":"2026-09-14T11:57:57.901Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2025-23129","references":[{"url":"https://git.kernel.org/stable/c/8d0519f511d93d675f61d6bfb45ffcc945af4b14"},{"url":"https://git.kernel.org/stable/c/7493b9baf0e54b44caae46715aaa409a84bd9f4b"},{"url":"https://git.kernel.org/stable/c/80dc5a2ce5b75d648e08549617f5c555d07ae43c"},{"url":"https://git.kernel.org/stable/c/3fc42cfcc6e336f25dee79b34e57c4a63cd652a5"},{"url":"https://git.kernel.org/stable/c/68410c5bd381a81bcc92b808e7dc4e6b9ed25d11"}],"tags":["cve.org"],"epss":0.00189,"epssPercentile":0.08824,"ingestedAt":"2026-09-14T15:23:07.459Z","slug":"CVE-2025-23129","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nwifi: ath11k: Clear affinity hint before calling ath11k_pcic_free_irq() in error path\n\nIf a shared IRQ is used by the driver due to platform limitation, then the\nIRQ affinity hint is set right after the allocation of IRQ vectors in\nath11k_pci_alloc_msi(). This does no harm unless one of the functions\nrequesting the IRQ fails and attempt to free the IRQ. This results in the\nbelow warning:\n\nWARNING: CPU: 7 PID: 349 at kernel/irq/manage.c:1929 free_irq+0x278/0x29c\nCall trace:\n free_irq+0x278/0x29c\n ath11k_pcic_free_irq+0x70/0x10c [ath11k]\n ath11k_pci_probe+0x800/0x820 [ath11k_pci]\n local_pci_probe+0x40/0xbc\n\nThe warning is due to not clearing the affinity hint before freeing the\nIRQs.\n\nSo to fix this issue, clear the IRQ affinity hint before calling\nath11k_pcic_free_irq() in the error path. The affinity will be cleared once\nagain further down the error path due to code organization, but that does\nno harm.\n\nTested-on: QCA6390 hw2.0 PCI WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1\n\n## Affected\n\n- `Linux >= e01b3400d641cb290742849331f0d22e1202538a < 8d0519f511d93d675f61d6bfb45ffcc945af4b14`\n- `Linux >= d412d0ef300f28d698648cc7c19147ab413251fe < 7493b9baf0e54b44caae46715aaa409a84bd9f4b`\n- `Linux >= 39564b475ac5a589e6c22c43a08cbd283c295d2c < 80dc5a2ce5b75d648e08549617f5c555d07ae43c`\n- `Linux >= 39564b475ac5a589e6c22c43a08cbd283c295d2c < 3fc42cfcc6e336f25dee79b34e57c4a63cd652a5`\n- `Linux >= 39564b475ac5a589e6c22c43a08cbd283c295d2c < 68410c5bd381a81bcc92b808e7dc4e6b9ed25d11`\n- `Linux 5a9f55efa9333e3edb4826d945cfdd8356f6e269`\n- `Linux >= 6.1.63 < 6.1.188`\n- `Linux >= 6.6.2 < 6.6.157`\n- `Linux >= 6.5.12 < 6.6`\n- `Linux 6.7`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":202673,"id":"CVE-2025-23129","ts":1789402174442,"field":"cvss","old":"5.5","new":null},{"seq":202672,"id":"CVE-2025-23129","ts":1789402174442,"field":"severity","old":"medium","new":"none"}]}