PT-2025-29004 · Linux+5 · Linux Kernel+5

Publicado 2025-05-06 · Atualizado 2026-03-13 · CVE-2025-38284

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Média

Vetor base

AV:L/AC:H/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Linux kernel versions 6.14.2-061402 and earlier

Description: A flaw exists in the Linux kernel's wifi subsystem, specifically within the rtw89 PCI driver, related to the configuration of manual DAC mode via the PCI configuration API. The issue arises from improper handling of DMA configuration, potentially leading to a page fault when accessing memory. The kernel may generate an error trace related to a supervisor write access in kernel mode.

Recommendations: Linux kernel versions prior to 6.14.2-061402 are affected. Update to a newer version of the Linux kernel to address this issue.

Exploit

Correção

NULL Pointer Dereference

Enumeração de Fraquezas

CWE-476

CWE-399

Identificadores relacionados

BDU:2025-09680

CVE-2025-38284

USN-7769-1

USN-7769-2

USN-7769-3

USN-7770-1

USN-7771-1

USN-7789-1

USN-7789-2

Produtos afetados

Astra Linux

Debian

Linuxmint

Linux Kernel

Ubuntu

Rtw89

Referências · 216

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38284.json · Exploit
• https://ubuntu.com/security/CVE-2025-38092 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2025-38134 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2025-38274 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2025-38088 · Aviso do Fabricante
• https://ubuntu.com/security/notices/USN-7789-1 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2025-38165 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2025-38313 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2025-38081 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2025-38127 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2025-38304 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2025-38075 · Aviso do Fabricante
• https://git.kernel.org/linus/a70cf04b08f44f41bce14659aa7012674b15d9de · Nota
• https://bdu.fstec.ru/vul/2025-09680 · Nota de Segurança
• https://ubuntu.com/security/CVE-2025-38156 · Aviso do Fabricante