CVE-2025-38406

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: remove WARN on bad firmware input If the firmware gives bad input, that's nothing to do with the driver's stack at this point etc., so the WARN_ON() doesn't add any value. Additionally, this is one of the top syzbot reports now. Just print a message, and as an added bonus, print the sizes too.

Reserved 2025-04-16 | Published 2025-07-25 | Updated 2025-07-25 | Assigner Linux

Product status

Default status
unaffected

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 7a2afdc5af3b82b601f6a2f0d1c90d5f0bc27aeb
affected

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before e6c49f0b203a987c306676d241066451b74db1a5
affected

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 46b47d4b06fa7f234d93f0f8ac43798feafcff89
affected

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 89bd133529a4d2d68287128b357e49adc00ec690
affected

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 347827bd0c5680dac2dd59674616840c4d5154f1
affected

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 327997afbb5e62532c28c1861ab5534c01969c9a
affected

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 27d07deea35ae67f2e75913242e25bdb7e1114e5
affected

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before e7417421d89358da071fd2930f91e67c7128fbff
affected

Default status
affected

5.4.296
unaffected

5.10.240
unaffected

5.15.187
unaffected

6.1.144
unaffected

6.6.97
unaffected

6.12.37
unaffected

6.15.6
unaffected

6.16-rc3
unaffected

References

git.kernel.org/...c/7a2afdc5af3b82b601f6a2f0d1c90d5f0bc27aeb

git.kernel.org/...c/e6c49f0b203a987c306676d241066451b74db1a5

git.kernel.org/...c/46b47d4b06fa7f234d93f0f8ac43798feafcff89

git.kernel.org/...c/89bd133529a4d2d68287128b357e49adc00ec690

git.kernel.org/...c/347827bd0c5680dac2dd59674616840c4d5154f1

git.kernel.org/...c/327997afbb5e62532c28c1861ab5534c01969c9a

git.kernel.org/...c/27d07deea35ae67f2e75913242e25bdb7e1114e5

git.kernel.org/...c/e7417421d89358da071fd2930f91e67c7128fbff

cve.org (CVE-2025-38406)

nvd.nist.gov (CVE-2025-38406)

Download JSON