CVE-2025-38642: wifi: mac80211: fix WARN_ON for monitor mode on some devices
In the Linux kernel, the following vulnerability has been resolved:
wifi: mac80211: fix WARNON for monitor mode on some devices
On devices without WANTMONITORVIF (and probably without channel context support) we get a WARNON for changing the per-link setting of a monitor interface.
Since we already skip APVLAN interfaces and MONITOR with WANTMONITORVIF and/or NOVIRTUALMONITOR should update the settings, catch this in the link change code instead of the warning.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.15.10 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.16.1 - Upgrade
Upgrade
ubuntu/linux-aws-6.14to a version that resolves this vulnerability.Fixed in 6.14.0-1017.17~24.04.1 - Upgrade
Upgrade
ubuntu/linux-azure-6.14to a version that resolves this vulnerability.Fixed in 6.14.0-1017.17~24.04.1 - Upgrade
Upgrade
ubuntu/linux-gcp-6.14to a version that resolves this vulnerability.Fixed in 6.14.0-1020.21~24.04.1 - Upgrade
Upgrade
ubuntu/linux-oem-6.14to a version that resolves this vulnerability.Fixed in 6.14.0-1016.16 - Upgrade
Upgrade
ubuntu/linux-oracle-6.14to a version that resolves this vulnerability.Fixed in 6.14.0-1017.17~24.04.1 - Upgrade
Upgrade
ubuntu/linux-riscv-6.14to a version that resolves this vulnerability.Fixed in 6.14.0-36.36.1~24.04.1 - Upgrade
Upgrade
ubuntu/linux-realtime-6.14to a version that resolves this vulnerability.Fixed in 6.14.0-1016.16~24.04.1
Event History
Frequently Asked Questions
What is the severity of CVE-2025-38642?
The severity of CVE-2025-38642 is classified as a medium risk due to its impact on device performance and stability.
How do I fix CVE-2025-38642?
To fix CVE-2025-38642, update your Linux kernel to the latest version where the vulnerability has been resolved.
Which systems are affected by CVE-2025-38642?
CVE-2025-38642 affects Linux kernel systems, particularly those utilizing the mac80211 subsystem for Wi-Fi connections.
What is the impact of CVE-2025-38642?
The impact of CVE-2025-38642 includes potential warnings and errors in monitor mode for certain devices without specific capabilities.
Is CVE-2025-38642 a shared vulnerability?
CVE-2025-38642 is specific to certain configurations in the Linux kernel and does not have shared vulnerabilities in other software.