CVE-2025-38656wifi: iwlwifi: Fix error code in iwl_op_mode_dvm_start()
- 7.8HighCVSS base score
- 0.22%Exploitation in 30 daysEPSS · top 87% of all CVEs
- NoKnown exploitednot in CISA's KEV catalog
- NonePublic exploitsnone known yet
Description
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: Fix error code in iwl_op_mode_dvm_start() Preserve the error code if iwl_setup_deferred_work() fails. The current code returns ERR_PTR(0) (which is NULL) on this path. I believe the missing error code potentially leads to a use after free involving debugfs.
Timeline
ID reserved
By Linux
- 4 months later
· 4 months later
Published
- 14 months later
· 14 months later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| LinuxCNA (assigner) | 3.1 | High7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| NVDNVD · Modified | 3.1 | High7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
- EPSS (exploitation in 30 days)
- 0.22% · top 87% of all CVEs (12 Nov 2026)
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.8.
Affected products
- affected ca980f1911a7144d451d1c31298ab8507c6bd88f – < 5c432da1ee191e9f7830dd516456706063d7bec3
- affected 7dd6350307af6521b6240b295c93b7eec4daebe6 – < f95598a133a905fd937354ad902773d05593b8b9
- affected c0e43c3f6c0a79381b468574c241065998412b7c – < 991e2066f6009d3cb898413058c62dbcc92bd6d2
- affected 70a1b527eaea9430b1bd87de59f3b9f6bd225701 – < 1d068272c21d886d06526454b68368100ba0a720
- affected 90a0d9f339960448a3acc1437a46730f975efd6a – < cf80c02a9fdb6c5bc8508beb6a0f6a1294fc32f6
- affected c80832d445653baba5ac80cd2c2637c437ac881b
- affected b398120fbe0acfef60b16f6a0f69902d385d7728
- affected 2e9f85ee3b46453a2f250a57d3a9f10c70c71202
- affected 6663c52608d8d8727bf1911e6d9218069ba1c85e
- affected 5.4.297 – < 5.5
- affected 5.10.241 – < 5.11
- affected 5.15.190 – < 5.16
- affected 6.1.148 – < 6.2
- affected 6.6.102 – < 6.6.160
- affected 6.12.42 – < 6.12.114
References
References5
- https://git.kernel.org/stable/c/5c432da1ee191e9f7830dd516456706063d7bec3 (opens in a new tab)
- https://git.kernel.org/stable/c/f95598a133a905fd937354ad902773d05593b8b9 (opens in a new tab)
- https://git.kernel.org/stable/c/991e2066f6009d3cb898413058c62dbcc92bd6d2 (opens in a new tab)
- https://git.kernel.org/stable/c/1d068272c21d886d06526454b68368100ba0a720 (opens in a new tab)
- https://git.kernel.org/stable/c/cf80c02a9fdb6c5bc8508beb6a0f6a1294fc32f6 (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2025-25546 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2025-38656)Record last updated .