CVE-2025-38294: wifi: ath12k: fix NULL access in assign channel context handler
In the Linux kernel, the following vulnerability has been resolved:
wifi: ath12k: fix NULL access in assign channel context handler
Currently, when ath12kmacassignviftovdev() fails, the radio handle (ar) gets accessed from the link VIF handle (arvif) for debug logging, This is incorrect. In the fail scenario, radio handle is NULL. Fix the NULL access, avoid radio handle access by moving to the hardware debug logging helper function (ath12khwwarn).
Tested-on: QCN9274 hw2.0 PCI WLAN.WBE.1.3.1-00173-QCAHKSWPLSILICONZ-1 Tested-on: WCN7850 hw2.0 PCI WLAN.HMT.1.0.c5-00481-QCAHMTSWPLV1.0V2.0SILICONZ-3
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.15.3
Event History
Frequently Asked Questions
What is the severity of CVE-2025-38294?
CVE-2025-38294 has a high severity rating due to its potential to cause NULL pointer dereference in the Linux kernel's wifi driver.
How do I fix CVE-2025-38294?
To fix CVE-2025-38294, update your Linux kernel to the latest version where this vulnerability has been patched.
What systems are affected by CVE-2025-38294?
CVE-2025-38294 affects systems running Linux Kernel versions that include the ath12k wifi driver.
Can CVE-2025-38294 lead to a denial of service?
Yes, CVE-2025-38294 can potentially lead to a denial of service due to the NULL pointer dereference.
Is a reboot required after applying the patch for CVE-2025-38294?
Yes, after applying the patch for CVE-2025-38294, a reboot is typically required to ensure the kernel is updated.