{"affected":[{"defaultStatus":"unaffected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"lessThan":"2c4b122c75581331177686f68a08981371147d37","status":"affected","version":"d889913205cf7ebda905b1e62c5867ed4e39f6c2","versionType":"git"},{"lessThan":"232f962ae5fca98912a719e64b4964a5aec7c99b","status":"affected","version":"d889913205cf7ebda905b1e62c5867ed4e39f6c2","versionType":"git"},{"lessThan":"c426497fa2055c8005196922e7d29c41d7e0948a","status":"affected","version":"d889913205cf7ebda905b1e62c5867ed4e39f6c2","versionType":"git"}]},{"defaultStatus":"affected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"status":"affected","version":"6.3"},{"lessThan":"6.3","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.114","versionType":"semver"},{"lessThanOrEqual":"6.15.*","status":"unaffected","version":"6.15.4","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"6.16","versionType":"original_commit_for_fix"}]}],"cveId":"CVE-2025-38199","cwes":[],"description":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: ath12k: Fix memory leak due to multiple rx_stats allocation\n\nrx_stats for each arsta is allocated when adding a station.\narsta->rx_stats will be freed when a station is removed.\n\nRedundant allocations are occurring when the same station is added\nmultiple times. This causes ath12k_mac_station_add() to be called\nmultiple times, and rx_stats is allocated each time. As a result there\nis memory leaks.\n\nPrevent multiple allocations of rx_stats when ath12k_mac_station_add()\nis called repeatedly by checking if rx_stats is already allocated\nbefore allocating again. Allocate arsta->rx_stats if arsta->rx_stats\nis NULL respectively.\n\nTested-on: QCN9274 hw2.0 PCI WLAN.WBE.1.3.1-00173-QCAHKSWPL_SILICONZ-1\nTested-on: WCN7850 hw2.0 PCI WLAN.HMT.1.0.c5-00481-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3","epss":{"date":"2026-11-05","percentile":0.11049,"score":0.00208},"exploits":[],"kev":null,"metrics":[],"modifiedAt":1793911939095,"publishedAt":1751636241227,"references":[{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/2c4b122c75581331177686f68a08981371147d37"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/232f962ae5fca98912a719e64b4964a5aec7c99b"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/c426497fa2055c8005196922e7d29c41d7e0948a"}],"remediation":[],"revision":"9e89db063782688fbde35aeaccbc13d1fd797ff5740cca037b21ef0999aab11e","sources":[{"modifiedAt":1793911939095,"name":"CNA: Linux","retrievedAt":1793913611124,"url":"https://www.cve.org/CVERecord?id=CVE-2025-38199"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793913636644,"url":"https://api.first.org/data/v1/epss?cve=CVE-2025-38199"}],"ssvc":{"assessedAt":1793911869967,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"wifi: ath12k: Fix memory leak due to multiple rx_stats allocation","updatedAt":1793913636644}