CVE-2025-38157

HighCVSS 7.8/10Last modified Nov 5, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: ath9k_htc: Abort software beacon handling if disabled

A malicious USB device can send a WMI_SWBA_EVENTID event from an ath9k_htc-managed device before beaconing has been enabled. This causes a device-by-zero error in the driver, leading to either a crash or an out of bounds read.

Prevent this by aborting the handling in ath9k_htc_swba() if beacons are not enabled.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

VendorProductVersions
LinuxLinux>= 832f6a18fc2aead14954c081ece03b7a5b425f81, < e5ce9df1d68094d37360dbd9b09289d42fa21e54; >= 832f6a18fc2aead14954c081ece03b7a5b425f81, < 0281c19074976ec48f0078d50530b406ddae75bc; >= 832f6a18fc2aead14954c081ece03b7a5b425f81, < 7ee3fb6258da8c890a51b514f60d7570dc703605; >= 832f6a18fc2aead14954c081ece03b7a5b425f81, < 40471b23147c86ea3ed97faee79937c618250bd0; >= 832f6a18fc2aead14954c081ece03b7a5b425f81, < 5482ef9875eaa43f0435e14570e1193823de857e; >= 832f6a18fc2aead14954c081ece03b7a5b425f81, < ee5ee646385f5846dcbc881389f3c44a197c402a; >= 832f6a18fc2aead14954c081ece03b7a5b425f81, < 5a85c21f812e02cb00ca07007d88acdd42d08c46; >= 832f6a18fc2aead14954c081ece03b7a5b425f81, < ac4e317a95a1092b5da5b9918b7118759342641c
LinuxLinux3.0

References

Timeline

Published
Jul 3, 2025
Last modified
Nov 5, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-381585.5In the Linux kernel, the following vulnerability has been resolved: hisi_acc_vfio_pci: fix XQE dma address error The dma addresses of EQE CVE-2025-381597.1In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds CVE-2025-38167.2A vulnerability classified as critical was found in westboy CicadasCMS 2.0. This vulnerability affects unknown code of the file /system/scheCVE-2025-381605.5In the Linux kernel, the following vulnerability has been resolved: clk: bcm: rpi: Add NULL check in raspberrypi_clk_register() devm_kasprCVE-2025-381615.5In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction UpoCVE-2025-381625.5In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_pipapo: prevent overflow in lookup table allocation CVE-2025-381635.5In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on sbi->total_valid_block_count syzbot reCVE-2025-381645.5In the Linux kernel, the following vulnerability has been resolved: f2fs: zone: fix to avoid inconsistence in between SIT and SSA w/ belowCVE-2025-381655.5In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix panic when calling skb_linearize The panic can be reCVE-2025-381665.5In the Linux kernel, the following vulnerability has been resolved: bpf: fix ktls panic with sockmap [ 2172.936997] ------------[ cut hereCVE-2025-381675.5In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: handle hdr_first_de() return value The hdr_first_de() functiCVE-2025-381685.5In the Linux kernel, the following vulnerability has been resolved: perf: arm-ni: Unregister PMUs on probe failure When a resource allocat
CVE-2025-38157: High severity, CVSS 7.8 | Vulnix