In the Linux kernel, the following vulnerability has been resolved:
wifi: iwlwifi: Fix error code in iwlopmodedvmstart()
Preserve the error code if iwlsetupdeferredwork() fails. The current code returns ERRPTR(0) (which is NULL) on this path. I believe the missing error code potentially leads to a use after free involving debugfs.
{
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38656.json"
}"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-38656.json"
[
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@991e2066f6009d3cb898413058c62dbcc92bd6d2",
"digest": {
"function_hash": "39408935797937963471083898393910477010",
"length": 6182.0
},
"id": "CVE-2025-38656-1dd26f07",
"deprecated": false,
"target": {
"file": "drivers/net/wireless/intel/iwlwifi/dvm/main.c",
"function": "iwl_op_mode_dvm_start"
}
},
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1d068272c21d886d06526454b68368100ba0a720",
"digest": {
"line_hashes": [
"282680805079730887752134380052709552243",
"117278978651133636352981157331493103859",
"197185660839800352593857132708407747123",
"281623961716027995147398679263560531636"
],
"threshold": 0.9
},
"id": "CVE-2025-38656-2414ad58",
"deprecated": false,
"target": {
"file": "drivers/net/wireless/intel/iwlwifi/dvm/main.c"
}
},
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cf80c02a9fdb6c5bc8508beb6a0f6a1294fc32f6",
"digest": {
"line_hashes": [
"282680805079730887752134380052709552243",
"117278978651133636352981157331493103859",
"197185660839800352593857132708407747123",
"281623961716027995147398679263560531636"
],
"threshold": 0.9
},
"id": "CVE-2025-38656-3eeaafa0",
"deprecated": false,
"target": {
"file": "drivers/net/wireless/intel/iwlwifi/dvm/main.c"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cf80c02a9fdb6c5bc8508beb6a0f6a1294fc32f6",
"digest": {
"function_hash": "328410705353816942948786271947561598158",
"length": 6111.0
},
"id": "CVE-2025-38656-447ca88a",
"deprecated": false,
"target": {
"file": "drivers/net/wireless/intel/iwlwifi/dvm/main.c",
"function": "iwl_op_mode_dvm_start"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1d068272c21d886d06526454b68368100ba0a720",
"digest": {
"function_hash": "328410705353816942948786271947561598158",
"length": 6111.0
},
"id": "CVE-2025-38656-8a102fc3",
"deprecated": false,
"target": {
"file": "drivers/net/wireless/intel/iwlwifi/dvm/main.c",
"function": "iwl_op_mode_dvm_start"
}
},
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@991e2066f6009d3cb898413058c62dbcc92bd6d2",
"digest": {
"line_hashes": [
"282680805079730887752134380052709552243",
"117278978651133636352981157331493103859",
"197185660839800352593857132708407747123",
"281623961716027995147398679263560531636"
],
"threshold": 0.9
},
"id": "CVE-2025-38656-e7574bef",
"deprecated": false,
"target": {
"file": "drivers/net/wireless/intel/iwlwifi/dvm/main.c"
}
}
]