CVE-2025-38656

wifi: iwlwifi: Fix error code in iwl_op_mode_dvm_start()

State: Published
Severity: 7.8 High
Published: Aug 22, 2025
Updated: Oct 21, 2026
Reserved: Apr 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: iwlwifi: Fix error code in iwl_op_mode_dvm_start()

Preserve the error code if iwl_setup_deferred_work() fails. The current code returns ERR_PTR(0) (which is NULL) on this path. I believe the missing error code potentially leads to a use after free involving debugfs.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	ca980f1911a7144d451d1c31298ab8507c6bd88f to before 5c432da1ee191e9f7830dd516456706063d7bec3Affected 7dd6350307af6521b6240b295c93b7eec4daebe6 to before f95598a133a905fd937354ad902773d05593b8b9Affected c0e43c3f6c0a79381b468574c241065998412b7c to before 991e2066f6009d3cb898413058c62dbcc92bd6d2Affected 70a1b527eaea9430b1bd87de59f3b9f6bd225701 to before 1d068272c21d886d06526454b68368100ba0a720Affected 90a0d9f339960448a3acc1437a46730f975efd6a to before cf80c02a9fdb6c5bc8508beb6a0f6a1294fc32f6Affected c80832d445653baba5ac80cd2c2637c437ac881bAffected b398120fbe0acfef60b16f6a0f69902d385d7728Affected 2e9f85ee3b46453a2f250a57d3a9f10c70c71202Affected 6663c52608d8d8727bf1911e6d9218069ba1c85eAffected 5.4.297 to before 5.5Affected 5.10.241 to before 5.11Affected 5.15.190 to before 5.16Affected 6.1.148 to before 6.2Affected
LinuxLinux	6.6.102 to before 6.6.160Affected 6.12.42 to before 6.12.114Affected

Product

Versions

LinuxLinux

ca980f1911a7144d451d1c31298ab8507c6bd88f to before 5c432da1ee191e9f7830dd516456706063d7bec3Affected
7dd6350307af6521b6240b295c93b7eec4daebe6 to before f95598a133a905fd937354ad902773d05593b8b9Affected
c0e43c3f6c0a79381b468574c241065998412b7c to before 991e2066f6009d3cb898413058c62dbcc92bd6d2Affected
70a1b527eaea9430b1bd87de59f3b9f6bd225701 to before 1d068272c21d886d06526454b68368100ba0a720Affected
90a0d9f339960448a3acc1437a46730f975efd6a to before cf80c02a9fdb6c5bc8508beb6a0f6a1294fc32f6Affected
c80832d445653baba5ac80cd2c2637c437ac881bAffected
b398120fbe0acfef60b16f6a0f69902d385d7728Affected
2e9f85ee3b46453a2f250a57d3a9f10c70c71202Affected
6663c52608d8d8727bf1911e6d9218069ba1c85eAffected
5.4.297 to before 5.5Affected
5.10.241 to before 5.11Affected
5.15.190 to before 5.16Affected
6.1.148 to before 6.2Affected

LinuxLinux

6.6.102 to before 6.6.160Affected
6.12.42 to before 6.12.114Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.