🛡️ CVE-2025-68729 — kernel

⚪ Unknown ✅ No Known Exploit NVD
N/A
CVSS Score
0 Low4 Medium7 High9 Critical10

Description

wifi: ath12k: Fix MSDU buffer types handling in RX error path

In the Linux kernel, the following vulnerability has been resolved:

wifi: ath12k: Fix MSDU buffer types handling in RX error path

Currently, packets received on the REO exception ring from

unassociated peers are of MSDU buffer type, while the driver expects

link descriptor type packets. These packets are not parsed further due

to a return check on packet type in ath12k_hal_desc_reo_parse_err(),

but the associated skb is not freed. This may lead to kernel

crashes and buffer leaks.

Hence to fix, update the RX error handler to explicitly drop

MSDU buffer type packets received on the REO exception ring.

This prevents further processing of invalid packets and ensures

stability in the RX error handling path.

Tested-on: QCN9274 hw2.0 PCI WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1

Affected software

CVE-2025-68729 is recorded against 2 packages.

  • kernel (from 6.18.0 up to 6.18.2)
  • unknown

Timeline and source

Published on 24 December 2025 and last revised on 15 July 2026. No public exploit is currently recorded for this entry. Record sourced from NVD.

References

git.kernel.org (Web)
git.kernel.org (Web)
git.kernel.org (Web)
github.com (Advisory)
nvd.nist.gov (Advisory)
git.kernel.org (Package)

CVE-2025-68729 on other distributions

Each distribution ships its own build and its own fixed version. Pick the one you run:

Details

Severity Unknown
CVSS Score N/A
CVSS Vector N/A
CWE N/A
Public Exploit ✅ No
Source NVD
Published 2025-12-24
Updated 2026-08-12
Modified 2026-07-15
Fix URL N/A

Affected Packages

Software From version Fixed in
kernel 6.18.0 6.18.2
unknown — —

Similar Threats

Free Vulnerability Check

Is your site affected by CVE-2025-68729?

BotEraser helps you identify potentially vulnerable plugins and themes by checking your installation against CVE-2025-68729 and other known CVE records.

Scan My Site Free →

No credit card required  ·  Results in minutes

ⓘ Data Notice: The information presented above has been compiled from publicly available internet sources. Boteraser aggregates this data solely for informational purposes and does not independently classify, evaluate, or endorse any findings about the vulnerabilities listed. The accuracy and completeness of this information is the sole responsibility of the original publishers. Boteraser and its operators accept no liability for any decisions made based on this data.