Riskcovery

CVE-2025-38420

wifi: carl9170: do not ping device which has failed to load firmware

State
Published
Severity
Not scored
Published
Jul 25, 2025
Updated
May 11, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: carl9170: do not ping device which has failed to load firmware

Syzkaller reports [1, 2] crashes caused by an attempts to ping the device which has failed to load firmware. Since such a device doesn't pass 'ieee80211_register_hw()', an internal workqueue managed by 'ieee80211_queue_work()' is not yet created and an attempt to queue work on it causes null-ptr-deref.

[1] https://syzkaller.appspot.com/bug?extid=9a4aec827829942045ff [2] https://syzkaller.appspot.com/bug?extid=0d8afba53e8fb2633217

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • e4a668c59080f862af3ecc28b359533027cbe434 to before 0140d3d37f0f1759d1fdedd854c7875a86e15f8dAffected
  • e4a668c59080f862af3ecc28b359533027cbe434 to before 8a3734a6f4c05fd24605148f21fb2066690d61b3Affected
  • e4a668c59080f862af3ecc28b359533027cbe434 to before 527fad1ae32ffa2d4853a1425fe1c8dbb8c9744cAffected
  • e4a668c59080f862af3ecc28b359533027cbe434 to before bfeede26e97ce4a15a0b961118de4a0e28c9907aAffected
  • e4a668c59080f862af3ecc28b359533027cbe434 to before 4e9ab5c48ad5153cc908dd29abad0cd2a92951e4Affected
  • e4a668c59080f862af3ecc28b359533027cbe434 to before 301268dbaac8e9013719e162a000202eac8054beAffected
  • e4a668c59080f862af3ecc28b359533027cbe434 to before 11ef72b3312752c2ff92f3c1e64912be3228ed36Affected
  • e4a668c59080f862af3ecc28b359533027cbe434 to before 15d25307692312cec4b57052da73387f91a2e870Affected
LinuxLinux
  • 2.6.38Affected
  • before 2.6.38Not affected
  • 5.4.295 through 5.4.*Not affected
  • 5.10.239 through 5.10.*Not affected
  • 5.15.186 through 5.15.*Not affected
  • 6.1.142 through 6.1.*Not affected
  • 6.6.95 through 6.6.*Not affected
  • 6.12.35 through 6.12.*Not affected
  • 6.15.4 through 6.15.*Not affected
  • 6.16 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.