IRQ Affinity Hint Clearance Vulnerability in Linux Kernel: ath11k Driver Issue
Summary
CVE-2025-23129: In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: Clear affinity hint before calling ath11k_pcic_free_irq() in error path If a shared IRQ is used by the driver due to platform limitation,... Affects linux versions 6.1.106-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is a core component of many operating systems, providing essential services for hardware and software interactions. The ath11k driver is responsible for managing Qualcomm Atheros 11ax wireless chipsets, enabling Wi-Fi connectivity. This driver is crucial for devices relying on wireless communication, and any vulnerabilities can lead to system instability or security risks.
Vulnerability Detail
In the Linux kernel, specifically within the ath11k driver, a vulnerability exists related to the handling of IRQ (Interrupt Request) affinity hints. When a shared IRQ is utilized due to platform limitations, the IRQ affinity hint is set during the allocation of IRQ vectors. If an error occurs during the allocation process, and the driver attempts to free the IRQ without clearing the affinity hint, it triggers a warning in the kernel logs. This can lead to potential system instability and may affect the performance of the wireless chipset, as the IRQ management is not handled correctly.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. The best course of action is to apply the patch by updating the kernel to the latest version.
Conclusion
The CVE-2025-23129 vulnerability in the Linux kernel's ath11k driver poses a risk of system instability due to improper IRQ management. Users are encouraged to update their kernel to the latest version to mitigate this issue. Utilizing tools like Vulert can help monitor and alert for vulnerabilities in real-time.
See every vulnerability recorded for linux →
FAQ
CVE-2025-23129 is a vulnerability in the Linux kernel's ath11k driver related to IRQ affinity hint management, which can lead to warnings and potential system instability.
You can use Vulert, which monitors open-source vulnerabilities in your software. By using the Vulert playground, you can check if your application is affected by this vulnerability without needing to sign up.
The primary risk is system instability due to improper IRQ management, which can affect the performance of wireless connectivity and lead to kernel warnings.
Yes, a patch is available in the updated versions of the Linux kernel. Users should update their kernel to the latest version to mitigate this vulnerability.
While there are no specific workarounds, it is advisable to monitor your system for any unusual behavior and plan to update the kernel as soon as possible.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
