Unknown severity · Source severity not reportedCVE-2025-68729

wifi: ath12k: Fix MSDU buffer types handling in RX error pathCVE-2025-68729

Answer in brief

CVE-2025-68729 records a Unknown severity vulnerability in wifi: ath12k: Fix MSDU buffer types handling in RX error path. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.

Analysis pending evidence review

HOL Guard separates source facts from reviewed analysis. See the methodology.

Published Dec 24, 2025Updated Oct 21, 2026Source checked Oct 21, 2026First seen by HOL Oct 20, 2026Material review Oct 21, 2026

Upstream Advisory

Key facts

Risk: Unknown severitySource severity not reported
Exploitation: Not marked as known exploited
Affected software: 2 mapped packages or products
Fix availability: Available

Why this deserves its current priority

A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.

Analysis status

Analysis pending evidence review

Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.

Affected scope and exposure questions

The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.

Mapped affected packages and fixed versions
Package	Affected range	Fixed version
Linux/Linuxgeneric	>=d889913205cf7ebda905b1e62c5867ed4e39f6c2 <abfbceda0d2391524ad1df88867b3f3af36d17c7 \|\| >=d889913205cf7ebda905b1e62c5867ed4e39f6c2 <17a9b93283c6f0b799a338bbc50fa115012429d9 \|\| >=d889913205cf7ebda905b1e62c5867ed4e39f6c2 <5ff5a9d71cdc49c3400f30583a784ad0a17d01ec \|\| >=d889913205cf7ebda905b1e62c5867ed4e39f6c2 <ab0554f51e5f2b9506e8a09e8accd02f00056729 \|\| >=d889913205cf7ebda905b1e62c5867ed4e39f6c2 <36f9edbb9d0fc36c865c74f3c1ad8e1261ad3981	abfbceda0d2391524ad1df88867b3f3af36d17c7, 17a9b93283c6f0b799a338bbc50fa115012429d9, 5ff5a9d71cdc49c3400f30583a784ad0a17d01ec, ab0554f51e5f2b9506e8a09e8accd02f00056729, 36f9edbb9d0fc36c865c74f3c1ad8e1261ad3981
Linux/Linuxgeneric	6.3	Not reported

Recommended response

Check inventory. Check lockfiles and deployed manifests for Linux/Linux, Linux/Linux.
Review the reported fix. Update Linux/Linux to abfbceda0d2391524ad1df88867b3f3af36d17c7 if you use the affected versions. Test the change in a non-production environment first.

Evidence timeline and material changes

Published upstream
Dec 24, 2025
Evidence: source:cvelist:source_dates:source-dates:record
Source modified
Oct 21, 2026
Evidence: source:cvelist:source_dates:source-dates:record
First seen by HOL
Oct 20, 2026

Sources and claim methodology

Upstream source description

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Fix MSDU buffer types handling in RX error path Currently, packets received on the REO exception ring from unassociated peers are of MSDU buffer type, while the driver expects link descriptor type packets. These packets are not parsed further due to a return check on packet type in ath12k_hal_desc_reo_parse_err(), but the associated skb is not freed. This may lead to kernel crashes and buffer leaks. Hence to fix, update the RX error handler to explicitly drop MSDU buffer type packets received on the REO exception ring. This prevents further processing of invalid packets and ensures stability in the RX error handling path. Tested-on: QCN9274 hw2.0 PCI WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1

Quoted source text, attributed separately from HOL analysis.