PT-2025-29013 · Linux+7 · Linux Kernel+7
Anubis
·
Published
2025-03-20
·
Updated
2026-04-20
·
CVE-2025-38293
CVSS v2.0
6.0
Medium
| Vector | AV:L/AC:H/Au:S/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions:
Linux kernel (affected versions not specified)
Description:
A flaw exists in the Linux kernel’s ath11k driver related to list node corruption within the
ar->arvifs list during WLAN recovery. Specifically, the ath11k core halt() function only reinitializes the list head, potentially creating an invalid list node. This can lead to a kernel panic when a WLAN recovery occurs during interface removal, before the spin lock bh(&ar->data lock) in the ath11k mac op remove interface() function is executed. The issue is resolved by removing and reinitializing all vif list nodes from the list head during WLAN halt, ensuring the validity of list nodes and proper execution of list del() in ath11k mac op remove interface().Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Improper Initialization
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu
Ath11K