In the Linux kernel, the following vulnerability has been resolved:
wifi: ath9k_htc: Abort software beacon handling if disabled
A malicious USB device can send a WMISWBAEVENTID event from an ath9k_htc-managed device before beaconing has been enabled. This causes a device-by-zero error in the driver, leading to either a crash or an out of bounds read.
Prevent this by aborting the handling in ath9khtcswba() if beacons are not enabled.
[
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7ee3fb6258da8c890a51b514f60d7570dc703605",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2025-38157-06170fc0",
"target": {
"file": "drivers/net/wireless/ath/ath9k/htc_drv_beacon.c"
},
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"99011219130773496022091669089060167016",
"263617055503948163391105947532179922687",
"111172563669167376528206729229421301233"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0281c19074976ec48f0078d50530b406ddae75bc",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2025-38157-077f09a6",
"target": {
"file": "drivers/net/wireless/ath/ath9k/htc_drv_beacon.c"
},
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"99011219130773496022091669089060167016",
"263617055503948163391105947532179922687",
"111172563669167376528206729229421301233"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@40471b23147c86ea3ed97faee79937c618250bd0",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2025-38157-21f4d518",
"target": {
"function": "ath9k_htc_swba",
"file": "drivers/net/wireless/ath/ath9k/htc_drv_beacon.c"
},
"signature_type": "Function",
"digest": {
"length": 785.0,
"function_hash": "124775738065591450950356460068273885838"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ac4e317a95a1092b5da5b9918b7118759342641c",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2025-38157-4aa19c56",
"target": {
"file": "drivers/net/wireless/ath/ath9k/htc_drv_beacon.c"
},
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"99011219130773496022091669089060167016",
"263617055503948163391105947532179922687",
"111172563669167376528206729229421301233"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5a85c21f812e02cb00ca07007d88acdd42d08c46",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2025-38157-6d7eb5b7",
"target": {
"function": "ath9k_htc_swba",
"file": "drivers/net/wireless/ath/ath9k/htc_drv_beacon.c"
},
"signature_type": "Function",
"digest": {
"length": 785.0,
"function_hash": "124775738065591450950356460068273885838"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@40471b23147c86ea3ed97faee79937c618250bd0",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2025-38157-711fc450",
"target": {
"file": "drivers/net/wireless/ath/ath9k/htc_drv_beacon.c"
},
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"99011219130773496022091669089060167016",
"263617055503948163391105947532179922687",
"111172563669167376528206729229421301233"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ee5ee646385f5846dcbc881389f3c44a197c402a",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2025-38157-89836be2",
"target": {
"file": "drivers/net/wireless/ath/ath9k/htc_drv_beacon.c"
},
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"99011219130773496022091669089060167016",
"263617055503948163391105947532179922687",
"111172563669167376528206729229421301233"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e5ce9df1d68094d37360dbd9b09289d42fa21e54",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2025-38157-9151415c",
"target": {
"function": "ath9k_htc_swba",
"file": "drivers/net/wireless/ath/ath9k/htc_drv_beacon.c"
},
"signature_type": "Function",
"digest": {
"length": 785.0,
"function_hash": "124775738065591450950356460068273885838"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5a85c21f812e02cb00ca07007d88acdd42d08c46",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2025-38157-929cbfab",
"target": {
"file": "drivers/net/wireless/ath/ath9k/htc_drv_beacon.c"
},
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"99011219130773496022091669089060167016",
"263617055503948163391105947532179922687",
"111172563669167376528206729229421301233"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ac4e317a95a1092b5da5b9918b7118759342641c",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2025-38157-a609552d",
"target": {
"function": "ath9k_htc_swba",
"file": "drivers/net/wireless/ath/ath9k/htc_drv_beacon.c"
},
"signature_type": "Function",
"digest": {
"length": 785.0,
"function_hash": "124775738065591450950356460068273885838"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7ee3fb6258da8c890a51b514f60d7570dc703605",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2025-38157-bf47abd9",
"target": {
"function": "ath9k_htc_swba",
"file": "drivers/net/wireless/ath/ath9k/htc_drv_beacon.c"
},
"signature_type": "Function",
"digest": {
"length": 785.0,
"function_hash": "124775738065591450950356460068273885838"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0281c19074976ec48f0078d50530b406ddae75bc",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2025-38157-d95fd5ea",
"target": {
"function": "ath9k_htc_swba",
"file": "drivers/net/wireless/ath/ath9k/htc_drv_beacon.c"
},
"signature_type": "Function",
"digest": {
"length": 785.0,
"function_hash": "124775738065591450950356460068273885838"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e5ce9df1d68094d37360dbd9b09289d42fa21e54",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2025-38157-e3443bd8",
"target": {
"file": "drivers/net/wireless/ath/ath9k/htc_drv_beacon.c"
},
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"99011219130773496022091669089060167016",
"263617055503948163391105947532179922687",
"111172563669167376528206729229421301233"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ee5ee646385f5846dcbc881389f3c44a197c402a",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2025-38157-fe1bc0f9",
"target": {
"function": "ath9k_htc_swba",
"file": "drivers/net/wireless/ath/ath9k/htc_drv_beacon.c"
},
"signature_type": "Function",
"digest": {
"length": 785.0,
"function_hash": "124775738065591450950356460068273885838"
}
}
]