UnratedFix available
wifi: at76c50x: fix use after free access in at76_disconnect
Type: advisorySources: OSV
In the Linux kernel, the following vulnerability has been resolved: wifi: at76c50x: fix use after free access in at76_disconnect The memory pointed to by priv is freed at the end of at76_delete_device function (using ieee80211_free_hw). But the code then accesses the udev field of the freed object to put the USB device. This may also lead to a memory leak of the usb device. Fix this by using udev from interface.
- Products
- Kernel
- Affected versions
- Not specified
- Fixed versions
- 5.10.237, 5.15.181, 5.4.293, 6.1.135, 6.12.25, 6.14.4, 6.6.88
- CVEs
- CVE-2025-37796
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 7 Nov 2026, 14:27 UTC · Revision 1
Source evidence
wifi: at76c50x: fix use after free access in at76_disconnect
core-osv · Original sourcePublished 1 May 2025, 13:07 UTC
In the Linux kernel, the following vulnerability has been resolved: wifi: at76c50x: fix use after free access in at76_disconnect The memory pointed to by priv is freed at the end of at76_delete_device function (using ieee80211_free_hw). But the code then accesses the udev field of the freed object to put the USB device. This may also lead to a memory leak of the usb device. Fix this by using udev from interface.
osv:CVE-2025-37796
Kernel
Fixed versions: 5.4.293, 5.10.237, 5.15.181, 6.1.135, 6.6.88, 6.12.25, 6.14.4
Complete source record
{
"id": "9887635e5b2f32f2909097e6477f56529fecefcc62936fb380b6cad059c61fc5",
"url": "https://osv.dev/vulnerability/CVE-2025-37796",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "wifi: at76c50x: fix use after free access in at76_disconnect",
"summary": "In the Linux kernel, the following vulnerability has been resolved: wifi: at76c50x: fix use after free access in at76_disconnect The memory pointed to by priv is freed at the end of at76_delete_device function (using ieee80211_free_hw). But the code then accesses the udev field of the freed object to put the USB device. This may also lead to a memory leak of the usb device. Fix this by using udev from interface.",
"evidence": "osv:CVE-2025-37796",
"products": [
{
"name": {
"value": "Kernel",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.4.293",
"evidence": "/affected/1/ranges"
},
{
"value": "5.10.237",
"evidence": "/affected/1/ranges"
},
{
"value": "5.15.181",
"evidence": "/affected/1/ranges"
},
{
"value": "6.1.135",
"evidence": "/affected/1/ranges"
},
{
"value": "6.6.88",
"evidence": "/affected/1/ranges"
},
{
"value": "6.12.25",
"evidence": "/affected/1/ranges"
},
{
"value": "6.14.4",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"structured": {
"id": "CVE-2025-37796",
"aliases": [
"CVE-2025-37796"
],
"affected": [
{
"ranges": [
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "29e20aa6c6aff35c81d4da2e2cd516dadb569061"
},
{
"fixed": "c731cdfddcf1be1590d5ba8c9b508f98e3a2b3d6"
},
{
"fixed": "6e4ab3e574c2a335b40fa1f70d1c54fcb58ab33f"
},
{
"fixed": "3c619aec1f538333b56746d2f796aab1bca5c9a5"
},
{
"fixed": "5e7df74745700f059dc117a620e566964a2e8f2c"
},
{
"fixed": "7ca513631fa6ad3011b8b9197cdde0f351103704"
},
{
"fixed": "a9682bfef2cf3802515a902e964d774e137be1b9"
},
{
"fixed": "152721cbae42713ecfbca6847e0f102ee6b19546"
},
{
"fixed": "27c7e63b3cb1a20bb78ed4a36c561ea4579fd7da"
}
]
}
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-37796.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "3.17.0"
},
{
"fixed": "5.4.293"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.5.0"
},
{
"fixed": "5.10.237"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.11.0"
},
{
"fixed": "5.15.181"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.16.0"
},
{
"fixed": "6.1.135"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.2.0"
},
{
"fixed": "6.6.88"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.7.0"
},
{
"fixed": "6.12.25"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.13.0"
},
{
"fixed": "6.14.4"
}
]
}
],
"package": {
"name": "Kernel",
"ecosystem": "Linux"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-37796.json"
}
}
],
"modified": "2026-10-28T02:30:51.119342316Z",
"provider": "osv",
"references": [
"https://git.kernel.org/stable/c/152721cbae42713ecfbca6847e0f102ee6b19546",
"https://git.kernel.org/stable/c/27c7e63b3cb1a20bb78ed4a36c561ea4579fd7da",
"https://git.kernel.org/stable/c/3c619aec1f538333b56746d2f796aab1bca5c9a5",
"https://git.kernel.org/stable/c/5e7df74745700f059dc117a620e566964a2e8f2c",
"https://git.kernel.org/stable/c/6e4ab3e574c2a335b40fa1f70d1c54fcb58ab33f",
"https://git.kernel.org/stable/c/7ca513631fa6ad3011b8b9197cdde0f351103704",
"https://git.kernel.org/stable/c/a9682bfef2cf3802515a902e964d774e137be1b9",
"https://git.kernel.org/stable/c/c731cdfddcf1be1590d5ba8c9b508f98e3a2b3d6",
"https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html",
"https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html",
"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/37xxx/CVE-2025-37796.json",
"https://nvd.nist.gov/vuln/detail/CVE-2025-37796",
"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
],
"provider_metadata": {
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/37xxx/CVE-2025-37796.json"
}
},
"related_cves": [
{
"value": "CVE-2025-37796",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 519624,
"published_at": "2025-05-01T13:07:27.694+00:00"
}