IT

Tracker / CVE-2025-38656

CVE-2025-38656

High 7.8

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: Fix error code in iwl_op_mode_dvm_start() Preserve the error code if iwl_setup_deferred_work() fails. The current code returns ERR_PTR(0) (which is NULL) on this path. I believe the missing error code potentially leads to a use after free involving debugfs.

Affected products and versions

linux linux_kernel · 5.10.241 → 5.11
linux linux_kernel · 5.15.190 → 5.16
linux linux_kernel · 5.4.297 → 5.5
linux linux_kernel · 6.1.148 → 6.2
linux linux_kernel · 6.12.42 → 6.13
linux linux_kernel · 6.6.102 → 6.7

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References