CVE-2025-38647

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-38647
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-38647.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-38647
Downstream
Published
2025-08-22T16:00:52.106Z
Modified
2026-04-02T12:48:04.208195Z
Summary
wifi: rtw89: sar: drop lockdep assertion in rtw89_set_sar_from_acpi
Details

In the Linux kernel, the following vulnerability has been resolved:

wifi: rtw89: sar: drop lockdep assertion in rtw89setsarfromacpi

The following assertion is triggered on the rtw89 driver startup. It looks meaningless to hold wiphy lock on the early init stage so drop the assertion.

WARNING: CPU: 7 PID: 629 at drivers/net/wireless/realtek/rtw89/sar.c:502 rtw89setsarfromacpi+0x365/0x4d0 [rtw89core] CPU: 7 UID: 0 PID: 629 Comm: (udev-worker) Not tainted 6.15.0+ #29 PREEMPT(lazy) Hardware name: LENOVO 21D0/LNVNB161216, BIOS J6CN50WW 09/27/2024 RIP: 0010:rtw89setsarfromacpi+0x365/0x4d0 [rtw89core] Call Trace: <TASK> rtw89sarinit+0x68/0x2c0 [rtw89core] rtw89coreinit+0x188e/0x1e50 [rtw89core] rtw89pciprobe+0x530/0xb50 [rtw89pci] localpciprobe+0xd9/0x190 pcicallprobe+0x183/0x540 pcideviceprobe+0x171/0x2c0 reallyprobe+0x1e1/0x890 __driverprobedevice+0x18c/0x390 driverprobedevice+0x4a/0x120 __driverattach+0x1a0/0x530 busforeachdev+0x10b/0x190 busadddriver+0x2eb/0x540 driverregister+0x1a3/0x3a0 dooneinitcall+0xd5/0x450 doinitmodule+0x2cc/0x8f0 initmodulefromfile+0xe1/0x150 idempotentinitmodule+0x226/0x760 _x64sysfinitmodule+0xcd/0x150 dosyscall64+0x94/0x380 entrySYSCALL64afterhwframe+0x76/0x7e

Found by Linux Verification Center (linuxtesting.org).

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38647.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
88ca3107d2ce06448018e0571f7c0f1b40f57b55
Fixed
f7ac6df92eee030151476078069dc3eb0002dfb0
Fixed
6fe21445f7e801de5527d420f8e25e97b0cdd7e2

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-38647.json"