CVE-2025-38643

Name of the Vulnerable Software and Affected Versions: Linux kernel versions 6.14.0-rc5-wt-g03960e6f9d47 #33 and earlier.

Description: A missing lock in the cfg80211 check and end cac() function within the Linux kernel's wireless subsystem can lead to issues when callers of wdev chandef() do not hold the wiphy mutex. Specifically, the worker cfg80211 propagate cac done wk() does not acquire the necessary lock, potentially causing a warning during operations like the mesh peer connected dfs test from hostapd.

Recommendations: Update to a newer kernel version to address this issue.