CVE-2025-38602

iwlwifi: Add missing check for alloc_ordered_workqueue

State: Published
Severity: Not scored
Published: Aug 19, 2025
Updated: May 11, 2026
Reserved: Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

iwlwifi: Add missing check for alloc_ordered_workqueue

Add check for the return value of alloc_ordered_workqueue since it may return NULL pointer.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	b481de9ca074528fe8c429604e2777db8b89806a to before c80832d445653baba5ac80cd2c2637c437ac881bAffected b481de9ca074528fe8c429604e2777db8b89806a to before b398120fbe0acfef60b16f6a0f69902d385d7728Affected b481de9ca074528fe8c429604e2777db8b89806a to before 2e9f85ee3b46453a2f250a57d3a9f10c70c71202Affected b481de9ca074528fe8c429604e2777db8b89806a to before 6663c52608d8d8727bf1911e6d9218069ba1c85eAffected b481de9ca074528fe8c429604e2777db8b89806a to before ca980f1911a7144d451d1c31298ab8507c6bd88fAffected b481de9ca074528fe8c429604e2777db8b89806a to before 7dd6350307af6521b6240b295c93b7eec4daebe6Affected b481de9ca074528fe8c429604e2777db8b89806a to before c0e43c3f6c0a79381b468574c241065998412b7cAffected b481de9ca074528fe8c429604e2777db8b89806a to before 70a1b527eaea9430b1bd87de59f3b9f6bd225701Affected b481de9ca074528fe8c429604e2777db8b89806a to before 90a0d9f339960448a3acc1437a46730f975efd6aAffected
LinuxLinux	2.6.24Affected before 2.6.24Not affected 5.4.297 through 5.4.Not affected 5.10.241 through 5.10.Not affected 5.15.190 through 5.15.Not affected 6.1.148 through 6.1.Not affected 6.6.102 through 6.6.Not affected 6.12.42 through 6.12.Not affected 6.15.10 through 6.15.Not affected 6.16.1 through 6.16.Not affected 6.17 and laterNot affected

Product

Versions

LinuxLinux

b481de9ca074528fe8c429604e2777db8b89806a to before c80832d445653baba5ac80cd2c2637c437ac881bAffected
b481de9ca074528fe8c429604e2777db8b89806a to before b398120fbe0acfef60b16f6a0f69902d385d7728Affected
b481de9ca074528fe8c429604e2777db8b89806a to before 2e9f85ee3b46453a2f250a57d3a9f10c70c71202Affected
b481de9ca074528fe8c429604e2777db8b89806a to before 6663c52608d8d8727bf1911e6d9218069ba1c85eAffected
b481de9ca074528fe8c429604e2777db8b89806a to before ca980f1911a7144d451d1c31298ab8507c6bd88fAffected
b481de9ca074528fe8c429604e2777db8b89806a to before 7dd6350307af6521b6240b295c93b7eec4daebe6Affected
b481de9ca074528fe8c429604e2777db8b89806a to before c0e43c3f6c0a79381b468574c241065998412b7cAffected
b481de9ca074528fe8c429604e2777db8b89806a to before 70a1b527eaea9430b1bd87de59f3b9f6bd225701Affected
b481de9ca074528fe8c429604e2777db8b89806a to before 90a0d9f339960448a3acc1437a46730f975efd6aAffected

LinuxLinux

2.6.24Affected
before 2.6.24Not affected
5.4.297 through 5.4.*Not affected
5.10.241 through 5.10.*Not affected
5.15.190 through 5.15.*Not affected
6.1.148 through 6.1.*Not affected
6.6.102 through 6.6.*Not affected
6.12.42 through 6.12.*Not affected
6.15.10 through 6.15.*Not affected
6.16.1 through 6.16.*Not affected
6.17 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.