Linux vulnerability

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: delete timer and free skb queue when unloading Fix possible crash and memory leak on driver unload by deleting TX purge timer and freeing C2H queue in 'rtw_core_deinit()', shrink critical section in the latter by freeing COEX queue out of TX report lock scope.

Published 4 Oct 2025Updated 3 Oct 20263 sources
CVSS 5.5

What happened

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: delete timer and free skb queue when unloading Fix possible crash and memory leak on driver unload by deleting TX purge timer and freeing C2H queue in 'rtw_core_deinit()', shrink critical section in the latter by freeing COEX queue out of TX report lock scope.

Affected versions

Linux: e3037485c68ec1a299ff41160d8fedbd4abc29b9 through before 60ee0f6fea7ba5681ebf7d70b8ebe592227188a4 (git); e3037485c68ec1a299ff41160d8fedbd4abc29b9 through before 4128b00a6006870e117ab1841e58f369e9284ecb (git); e3037485c68ec1a299ff41160d8fedbd4abc29b9 through before 634fcbcaa4062db39aeb5ac6ed1bc1feb8dd5216 (git); 5.2 Fixed: See vendor advisory.

Why it matters

Review the vendor advisory and exposure of the affected product to determine operational impact.

Detection & mitigation

  • Apply vendor-provided updates or mitigations.
  • Review affected product exposure and access logs.

Public PoC references

No public PoC reference has passed the current publication threshold.