In the Linux kernel, the following vulnerability has been resolved:
wifi: iwlwifi: Fix error code in iwlopmodedvmstart()
Preserve the error code if iwlsetupdeferredwork() fails. The current code returns ERRPTR(0) (which is NULL) on this path. I believe the missing error code potentially leads to a use after free involving debugfs.
{
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38656.json",
"cna_assigner": "Linux"
}[
{
"id": "CVE-2025-38656-1dd26f07",
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@991e2066f6009d3cb898413058c62dbcc92bd6d2",
"target": {
"function": "iwl_op_mode_dvm_start",
"file": "drivers/net/wireless/intel/iwlwifi/dvm/main.c"
},
"digest": {
"length": 6182.0,
"function_hash": "39408935797937963471083898393910477010"
},
"signature_type": "Function"
},
{
"id": "CVE-2025-38656-2414ad58",
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1d068272c21d886d06526454b68368100ba0a720",
"target": {
"file": "drivers/net/wireless/intel/iwlwifi/dvm/main.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"282680805079730887752134380052709552243",
"117278978651133636352981157331493103859",
"197185660839800352593857132708407747123",
"281623961716027995147398679263560531636"
]
},
"signature_type": "Line"
},
{
"id": "CVE-2025-38656-3eeaafa0",
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cf80c02a9fdb6c5bc8508beb6a0f6a1294fc32f6",
"target": {
"file": "drivers/net/wireless/intel/iwlwifi/dvm/main.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"282680805079730887752134380052709552243",
"117278978651133636352981157331493103859",
"197185660839800352593857132708407747123",
"281623961716027995147398679263560531636"
]
},
"signature_type": "Line"
},
{
"id": "CVE-2025-38656-447ca88a",
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cf80c02a9fdb6c5bc8508beb6a0f6a1294fc32f6",
"target": {
"function": "iwl_op_mode_dvm_start",
"file": "drivers/net/wireless/intel/iwlwifi/dvm/main.c"
},
"digest": {
"length": 6111.0,
"function_hash": "328410705353816942948786271947561598158"
},
"signature_type": "Function"
},
{
"id": "CVE-2025-38656-8a102fc3",
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1d068272c21d886d06526454b68368100ba0a720",
"target": {
"function": "iwl_op_mode_dvm_start",
"file": "drivers/net/wireless/intel/iwlwifi/dvm/main.c"
},
"digest": {
"length": 6111.0,
"function_hash": "328410705353816942948786271947561598158"
},
"signature_type": "Function"
},
{
"id": "CVE-2025-38656-e7574bef",
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@991e2066f6009d3cb898413058c62dbcc92bd6d2",
"target": {
"file": "drivers/net/wireless/intel/iwlwifi/dvm/main.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"282680805079730887752134380052709552243",
"117278978651133636352981157331493103859",
"197185660839800352593857132708407747123",
"281623961716027995147398679263560531636"
]
},
"signature_type": "Line"
}
]
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-38656.json"