CVE-2025-39746

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

wifi: ath10k: shutdown driver when hardware is unreliable

In rare cases, ath10k may lose connection with the PCIe bus due to

some unknown reasons, which could further lead to system crashes during

resuming due to watchdog timeout:

ath10k_pci 0000:01:00.0: wmi command 20486 timeout, restarting hardware

ath10k_pci 0000:01:00.0: already restarting

ath10k_pci 0000:01:00.0: failed to stop WMI vdev 0: -11

ath10k_pci 0000:01:00.0: failed to stop vdev 0: -11

ieee80211 phy0: PM: **** DPM device timeout ****

Call Trace:

panic+0x125/0x315

dpm_watchdog_set+0x54/0x54

dpm_watchdog_handler+0x57/0x57

call_timer_fn+0x31/0x13c

At this point, all WMI commands will timeout and attempt to restart

device. So set a threshold for consecutive restart failures. If the

threshold is exceeded, consider the hardware is unreliable and all

ath10k operations should be skipped to avoid system crash.

fail_cont_count and pending_recovery are ato

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References