Wiz
Vulnerability DatabaseCVE-2025-39732

CVE-2025-39732: 
Linux Kernel vulnerability analysis and mitigation

Overview

CVE-2025-39732 is a vulnerability discovered in the Linux kernel, specifically affecting the wifi ath11k component. The issue was disclosed on September 7, 2025, and involves a sleeping-in-atomic bug in the ath11kmacopsetbitrate_mask() function (NVD Database).

Technical details

The vulnerability occurs when ath11kmacdisablepeerfixedrate() is passed as the iterator to ieee80211iteratestationsatomic(). While the iterator is required to be atomic, ath11kmacdisablepeerfixedrate() does not follow this requirement as it might sleep, resulting in a BUG warning at wmi.c:304. The issue was confirmed on WCN6855 hw2.0 PCI WLAN.HSP.1.1-03125-QCAHSPSWPLV1V2SILICONZ_LITE-3.6510.30 (NVD Database).

Impact

The vulnerability could potentially cause system instability or crashes due to the improper sleeping state in atomic context, affecting the WiFi functionality of systems using the affected Linux kernel versions (NVD Database).

Mitigation and workarounds

The issue has been resolved by changing to ieee80211iteratestationsmtx() instead of using ieee80211iteratestationsatomic(). Users are advised to update their Linux kernel to the patched version (NVD Database).

Additional resources

Source: This report was generated using AI

Related Linux Kernel vulnerabilities:

CVE ID

Severity

Score

Technologies

Component name

CISA KEV exploit

Has fix

Published date

CVE-2025-40258HIGH7
  • Linux KernelLinux Kernel
  • kernel-rt-64k-debug-devel-matched
NoNoDec 04, 2025
CVE-2025-40259MEDIUM6.2
  • Linux KernelLinux Kernel
  • kernel-rt-64k
NoNoDec 04, 2025
CVE-2025-40264MEDIUM5.5
  • Linux KernelLinux Kernel
  • kernel-64k-modules-extra
NoNoDec 04, 2025
CVE-2025-40254MEDIUM5.5
  • Linux KernelLinux Kernel
  • kernel-64k-devel-matched
NoNoDec 04, 2025
CVE-2025-40253MEDIUM5.5
  • Linux KernelLinux Kernel
  • kernel-64k-debug-modules-partner
NoNoDec 04, 2025

Free Vulnerability Assessment

Benchmark your Cloud Security Posture

Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.

Request assessment

Additional Wiz resources

Cloud Vulnerability DB

Cloud Vulnerability DB

A community-led vulnerabilities database

Cloud Threat Landscape

Cloud Threat Landscape

A threat intelligence database

PEACH

PEACH

A tenant isolation framework

Get a personalized demo

Ready to see Wiz in action?

"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management
Get a demo