CVE-2025-38605

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The Linux kernel contains a flaw within the ath12k driver where a NULL pointer dereference could occur in ath12k dp tx get encap type() during a vdev delete sequence. This occurs because the arvif->ar pointer could become NULL, leading to a kernel panic. The issue is resolved by passing a valid ab pointer directly to the function, avoiding the dereference. The function ath12k dp tx() is involved in the process, as are functions ath12k mac tx check max limit(), ieee80211 process measurement req(), ieee80211 tx dequeue(), ieee80211 tx prepare skb(), ieee80211 xmit(), ieee80211 subif start xmit(), ieee80211 subif start xmit(), netdev start xmit(), and dev hard start xmit().

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.