CVE-2025-38656: wifi: iwlwifi: Fix error code in iwl_op_mode_dvm_start()
In the Linux kernel, the following vulnerability has been resolved:
wifi: iwlwifi: Fix error code in iwlopmodedvmstart()
Preserve the error code if iwlsetupdeferredwork() fails. The current code returns ERRPTR(0) (which is NULL) on this path. I believe the missing error code potentially leads to a use after free involving debugfs.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-38656?
CVE-2025-38656 is a low severity vulnerability affecting the Linux kernel's iwlwifi driver.
How do I fix CVE-2025-38656?
To fix CVE-2025-38656, update the Linux kernel to the latest version where the vulnerability has been addressed.
Which versions of Linux Kernel are affected by CVE-2025-38656?
CVE-2025-38656 affects various versions of the Linux kernel that include the iwlwifi driver but specific versions may vary.
What are the potential impacts of CVE-2025-38656?
The impact of CVE-2025-38656 may include incorrect error handling in the wifi driver, potentially leading to unexpected behavior.
Is CVE-2025-38656 being actively exploited?
As of now, there is no public evidence to suggest that CVE-2025-38656 is being actively exploited.