CVE-2025-38406

wifi: ath6kl: remove WARN on bad firmware input

State: Published
Severity: Not scored
Published: Jul 25, 2025
Updated: May 11, 2026
Reserved: Apr 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: ath6kl: remove WARN on bad firmware input

If the firmware gives bad input, that's nothing to do with the driver's stack at this point etc., so the WARN_ON() doesn't add any value. Additionally, this is one of the top syzbot reports now. Just print a message, and as an added bonus, print the sizes too.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	bdcd81707973cf8aa9305337166f8ee842a050d4 to before 7a2afdc5af3b82b601f6a2f0d1c90d5f0bc27aebAffected bdcd81707973cf8aa9305337166f8ee842a050d4 to before e6c49f0b203a987c306676d241066451b74db1a5Affected bdcd81707973cf8aa9305337166f8ee842a050d4 to before 46b47d4b06fa7f234d93f0f8ac43798feafcff89Affected bdcd81707973cf8aa9305337166f8ee842a050d4 to before 89bd133529a4d2d68287128b357e49adc00ec690Affected bdcd81707973cf8aa9305337166f8ee842a050d4 to before 347827bd0c5680dac2dd59674616840c4d5154f1Affected bdcd81707973cf8aa9305337166f8ee842a050d4 to before 327997afbb5e62532c28c1861ab5534c01969c9aAffected bdcd81707973cf8aa9305337166f8ee842a050d4 to before 27d07deea35ae67f2e75913242e25bdb7e1114e5Affected bdcd81707973cf8aa9305337166f8ee842a050d4 to before e7417421d89358da071fd2930f91e67c7128fbffAffected
LinuxLinux	3.2Affected before 3.2Not affected 5.4.296 through 5.4.Not affected 5.10.240 through 5.10.Not affected 5.15.187 through 5.15.Not affected 6.1.144 through 6.1.Not affected 6.6.97 through 6.6.Not affected 6.12.37 through 6.12.Not affected 6.15.6 through 6.15.*Not affected 6.16 and laterNot affected

Product

Versions

LinuxLinux

bdcd81707973cf8aa9305337166f8ee842a050d4 to before 7a2afdc5af3b82b601f6a2f0d1c90d5f0bc27aebAffected
bdcd81707973cf8aa9305337166f8ee842a050d4 to before e6c49f0b203a987c306676d241066451b74db1a5Affected
bdcd81707973cf8aa9305337166f8ee842a050d4 to before 46b47d4b06fa7f234d93f0f8ac43798feafcff89Affected
bdcd81707973cf8aa9305337166f8ee842a050d4 to before 89bd133529a4d2d68287128b357e49adc00ec690Affected
bdcd81707973cf8aa9305337166f8ee842a050d4 to before 347827bd0c5680dac2dd59674616840c4d5154f1Affected
bdcd81707973cf8aa9305337166f8ee842a050d4 to before 327997afbb5e62532c28c1861ab5534c01969c9aAffected
bdcd81707973cf8aa9305337166f8ee842a050d4 to before 27d07deea35ae67f2e75913242e25bdb7e1114e5Affected
bdcd81707973cf8aa9305337166f8ee842a050d4 to before e7417421d89358da071fd2930f91e67c7128fbffAffected

LinuxLinux

3.2Affected
before 3.2Not affected
5.4.296 through 5.4.*Not affected
5.10.240 through 5.10.*Not affected
5.15.187 through 5.15.*Not affected
6.1.144 through 6.1.*Not affected
6.6.97 through 6.6.*Not affected
6.12.37 through 6.12.*Not affected
6.15.6 through 6.15.*Not affected
6.16 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.