PT-2025-29004 · Linux+5 · Linux Kernel+5

Published 2025-05-06 · Updated 2026-03-13 · CVE-2025-38284

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:L/AC:H/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Linux kernel versions 6.14.2-061402 and earlier

Description: A flaw exists in the Linux kernel's wifi subsystem, specifically within the rtw89 PCI driver, related to the configuration of manual DAC mode via the PCI configuration API. The issue arises from improper handling of DMA configuration, potentially leading to a page fault when accessing memory. The kernel may generate an error trace related to a supervisor write access in kernel mode.

Recommendations: Linux kernel versions prior to 6.14.2-061402 are affected. Update to a newer version of the Linux kernel to address this issue.

Exploit

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

CWE-399

Related Identifiers

BDU:2025-09680

CVE-2025-38284

USN-7769-1

USN-7769-2

USN-7769-3

USN-7770-1

USN-7771-1

USN-7789-1

USN-7789-2

Affected Products

Astra Linux

Debian

Linuxmint

Linux Kernel

Ubuntu

Rtw89

References · 216

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38284.json · Exploit
• https://ubuntu.com/security/CVE-2025-38092 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38134 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38274 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38088 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7789-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38165 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38313 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38081 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38127 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38304 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38075 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-09680 · Security Note
• https://ubuntu.com/security/CVE-2025-38156 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38270 · Vendor Advisory