What’s Vulnerable › Vulnerabilities

CVE-2025-37982: wifi: wl1251: fix memory leak in wl1251_tx_work

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-05-20 · updated 2026-06-17
• Weakness: CWE-401

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: wl1251: fix memory leak in wl1251_tx_work The skb dequeued from tx_queue is lost when wl1251_ps_elp_wakeup fails with a -ETIMEDOUT error. Fix that by queueing the skb back to tx_queue.

Affected products

• Debian Linux: 11.0
• Linux kernel: from 2.6.32 before 5.4.293; from 5.5 before 5.10.237; from 5.11 before 5.15.181; from 5.16 before 6.1.135; from 6.2 before 6.6.88; from 6.7 before 6.12.25 — fixed in 5.10.237, 5.15.181, 5.4.293, 6.1.135, 6.12.25, 6.14.4

How to fix

Upgrade to a fixed version: Linux kernel 5.10.237, 5.15.181, 5.4.293, 6.1.135. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/13c9744c1bcdb5de4e7dc1a78784788ecec52add
• https://git.kernel.org/stable/c/2996144be660d930d5e394652abe08fe89dbe00e
• https://git.kernel.org/stable/c/4a43fd36710669d67dbb5c16287a58412582ca26
• https://git.kernel.org/stable/c/52f224009ce1e44805e6ff3ffc2a06af9c1c3c5b
• https://git.kernel.org/stable/c/5a90c29d0204c5ffc45b43b4eced6eef0e19a33a
• https://git.kernel.org/stable/c/8fd4b9551af214d037fbc9d8e179840b8b917841
• https://git.kernel.org/stable/c/a0f0dc96de03ffeefc2a177b7f8acde565cb77f4
• https://git.kernel.org/stable/c/f08448a885403722c5c77dae51964badfcb69495
• https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html

Get alerted when CVE-2025-37982 or the next vulnerability affects your stack