PT-2025-27707 · Linux+1 · Linux Kernel+1

Published 2025-06-04 · Updated 2025-07-03 · CVE-2025-38121

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: A vulnerability in the Linux kernel has been resolved, specifically in the iwlwifi module. The issue occurs when there is an error during initialization, causing the system to retry initialization and act as if it is in a restart state when it is not. This leads to a NULL pointer dereference when canceling rx omi::finished work, which was not initialized. The fix involves setting in hw restart to true only if the firmware is running, indicating a successful load and avoiding the retry loop.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

BDU:2025-09000

CVE-2025-38121

Affected Products

Astra Linux

Linux Kernel

References · 13

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38121.json · Exploit
• https://git.kernel.org/stable/c/a26ec8e16958b6dd37dac9daf5fb6978fe0cb0b8 · Patch
• https://ubuntu.com/security/CVE-2025-38121 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-38121 · Security Note
• https://git.kernel.org/stable/c/960c7e6d388034d219dafffa6da0a5c2ccd5ff30 · Patch
• https://osv.dev/vulnerability/CVE-2025-38121 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-38121 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-09000 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-38121 · Security Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://lore.kernel.org/linux-cve-announce/2025070327-CVE-2025-38121-5390@gregkh · Note
• https://twitter.com/CVEnew/status/1940701636222939145 · Twitter Post
• https://git.kernel.org/linus/960c7e6d388034d219dafffa6da0a5c2ccd5ff30 · Note