---
id: CVE-2025-22128
title: >-
  wifi: ath12k: Clear affinity hint before calling ath12k_pci_free_irq() in
  error path
summary: >-
  In the Linux kernel, the following vulnerability has been resolved:


  wifi: ath12k: Clear affinity hint before calling ath12k_pci_free_irq() in
  error path


  If a shared IRQ is used by the driver due to platform limitation, then the

  IRQ aff…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= a3012f206d07fa62b5c2e384cbc3a81a4dbba3c9 <
    a69a594794fcad96d4cfce12aab6c5014a12b4c8
  - >-
    Linux >= a3012f206d07fa62b5c2e384cbc3a81a4dbba3c9 <
    35b33ba76765ce9e72949d957f3cf1feafd2955c
  - >-
    Linux >= a3012f206d07fa62b5c2e384cbc3a81a4dbba3c9 <
    b43b1e2c52db77c872bd60d30cdcc72c47df70c7
  - Linux 6.8
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-05T20:39:07.478255Z'
published: '2025-04-16'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T20:41:51.069Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2025-22128'
references:
  - url: 'https://git.kernel.org/stable/c/a69a594794fcad96d4cfce12aab6c5014a12b4c8'
  - url: 'https://git.kernel.org/stable/c/35b33ba76765ce9e72949d957f3cf1feafd2955c'
  - url: 'https://git.kernel.org/stable/c/b43b1e2c52db77c872bd60d30cdcc72c47df70c7'
tags:
  - cve.org
epss: 0.00186
epssPercentile: 0.08284
ingestedAt: '2026-11-05T22:38:31.862Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

wifi: ath12k: Clear affinity hint before calling ath12k_pci_free_irq() in error path

If a shared IRQ is used by the driver due to platform limitation, then the
IRQ affinity hint is set right after the allocation of IRQ vectors in
ath12k_pci_msi_alloc(). This does no harm unless one of the functions
requesting the IRQ fails and attempt to free the IRQ.

This may end up with a warning from the IRQ core that is expecting the
affinity hint to be cleared before freeing the IRQ:

kernel/irq/manage.c:

	/* make sure affinity_hint is cleaned up */
	if (WARN_ON_ONCE(desc->affinity_hint))
		desc->affinity_hint = NULL;

So to fix this issue, clear the IRQ affinity hint before calling
ath12k_pci_free_irq() in the error path. The affinity will be cleared once
again further down the error path due to code organization, but that does
no harm.

## Affected

- `Linux >= a3012f206d07fa62b5c2e384cbc3a81a4dbba3c9 < a69a594794fcad96d4cfce12aab6c5014a12b4c8`
- `Linux >= a3012f206d07fa62b5c2e384cbc3a81a4dbba3c9 < 35b33ba76765ce9e72949d957f3cf1feafd2955c`
- `Linux >= a3012f206d07fa62b5c2e384cbc3a81a4dbba3c9 < b43b1e2c52db77c872bd60d30cdcc72c47df70c7`
- `Linux 6.8`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.