CVE-2025-37982: 
Linux Kernel vulnerability analysis and mitigation

A memory leak vulnerability (CVE-2025-37982) was discovered in the Linux kernel's WiFi subsystem, specifically in the wl1251 driver. The vulnerability was publicly disclosed on May 20, 2025, affecting the Linux kernel's wireless networking stack, particularly the Texas Instruments wl1251 wireless driver (NVD Database, Wiz Report).

The vulnerability occurs when wl1251pselpwakeup fails with a -ETIMEDOUT error, causing the skb (socket buffer) dequeued from txqueue to be lost. This results in a memory leak in the wl1251txwork function. The technical root cause involves improper handling of error conditions in the driver's power-saving wake-up sequence. The vulnerability has been assigned a CVSS 3.1 score of 7.0 with vector string AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H (Wiz Report).

The memory leak can lead to gradual system resource depletion over time, potentially affecting system stability and performance in systems using the affected wireless driver (Wiz Report).

The vulnerability has been resolved by implementing a fix that queues the skb back to txqueue when wl1251pselpwakeup fails. This ensures proper resource cleanup and prevents the memory leak (NVD Database).