CVE-2025-38406

Katalog CVE

CVSS 5.5 · Medium EPSS 0,18%

Kerentanan pada linux kernel, debian linux. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: remove WARN on bad firmware input If the firmware gives bad input, that's nothing to do with the driver's stack at this point etc., so the WARN_ON() doesn't add any value. Additionally, this is one of the top syzbot reports now. Just print a message, and as an added bonus, print the sizes too.

Rincian

Terbit di NVD

25 Juli 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

EPSS (30 hari)

0,18% peluang dieksploitasi; lebih tinggi dari 7,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/27d07deea35ae67f2e75913242e25bdb7e1114e5 patch
• https://git.kernel.org/stable/c/327997afbb5e62532c28c1861ab5534c01969c9a patch
• https://git.kernel.org/stable/c/347827bd0c5680dac2dd59674616840c4d5154f1 patch
• https://git.kernel.org/stable/c/46b47d4b06fa7f234d93f0f8ac43798feafcff89 patch
• https://git.kernel.org/stable/c/7a2afdc5af3b82b601f6a2f0d1c90d5f0bc27aeb patch
• https://git.kernel.org/stable/c/89bd133529a4d2d68287128b357e49adc00ec690 patch
• https://git.kernel.org/stable/c/e6c49f0b203a987c306676d241066451b74db1a5 patch
• https://git.kernel.org/stable/c/e7417421d89358da071fd2930f91e67c7128fbff patch
• https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html advisory pihak ketiga