PT-2025-29011 · Linux+5 · Linux Kernel+5

CVE-2025-38291

·

Published

2025-04-16

·

Updated

2025-12-03

CVSS v3.1

8.8

High

VectorAV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)
Description: A flaw exists in the Linux kernel's wifi subsystem, specifically within the ath12k driver. The issue involves the potential for sending Wireless Management Interface (WMI) commands to the firmware during a firmware crash, leading to command failures and kernel call traces. The driver now sets the ATH12K FLAG CRASH FLUSH and ATH12K FLAG RECOVERY flags when a firmware crash is detected via MHI, preventing the transmission of WMI commands during recovery.
Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Command Injection

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2025-08506
CVE-2025-38291
OPENSUSE-SU-2025:20081-1
SUSE-SU-2025:02853-1
SUSE-SU-2025:02997-1
SUSE-SU-2025:03011-1
SUSE-SU-2025:21074-1
SUSE-SU-2025:21139-1
SUSE-SU-2025:21179-1
SUSE-SU-2025_02853-1
SUSE-SU-2025_02997-1
SUSE-SU-2025_03011-1
SUSE-SU-2026:20560-1
USN-7769-1
USN-7769-2
USN-7769-3
USN-7770-1
USN-7771-1
USN-7789-1
USN-7789-2

Affected Products

Astra Linux
Linuxmint
Linux Kernel
Suse
Ubuntu
Ath12K