CVE-2025-38316: wifi: mt76: mt7996: avoid NULL pointer dereference in mt7996_set_monitor()
In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76: mt7996: avoid NULL pointer dereference in mt7996setmonitor()
The function mt7996setmonitor() dereferences phy before the NULL sanity check.
Fix this to avoid NULL pointer dereference by moving the dereference after the check.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
In mt7996_set_monitor(), perform the NULL sanity check on phy before dereferencing phy.
Event History
Frequently Asked Questions
What is the severity of CVE-2025-38316?
CVE-2025-38316 has a severity rating that indicates a potential denial-of-service vulnerability due to a NULL pointer dereference.
How do I fix CVE-2025-38316?
To fix CVE-2025-38316, update to the latest version of the Linux kernel where the vulnerability has been patched.
What software is affected by CVE-2025-38316?
CVE-2025-38316 affects the Linux kernel specifically in the mt76 Wi-Fi driver.
What is the impact of CVE-2025-38316?
The impact of CVE-2025-38316 is that it can lead to system crashes, making the affected system unstable.
When was CVE-2025-38316 disclosed?
CVE-2025-38316 was disclosed in 2025, following the identification of the vulnerability in the Linux kernel.