PT-2025-29014 · Linux+4 · Linux Kernel+4

Published 2025-03-24 · Updated 2025-12-03 · CVE-2025-38294

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:L/AC:H/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: A flaw exists in the Linux kernel's wifi subsystem, specifically within the ath12k driver. A null access issue occurs in the assign channel context handler when ath12k mac assign vif to vdev() fails. This results in accessing a null radio handle (ar) from the link VIF handle (arvif) during debug logging. The issue is resolved by migrating debug logging to the ath12k hw warn hardware debug logging helper function, preventing access to the null radio handle.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

RCE

Weakness Enumeration

CWE-476

CWE-20

Related Identifiers

BDU:2025-08623

CVE-2025-38294

USN-7769-1

USN-7769-2

USN-7769-3

USN-7770-1

USN-7771-1

USN-7789-1

USN-7789-2

Affected Products

Astra Linux

Linuxmint

Linux Kernel

Ubuntu

Ath12K

References · 213

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38294.json · Exploit
• https://ubuntu.com/security/CVE-2025-38120 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38163 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38103 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38062 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38117 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38003 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38047 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38272 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38295 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38059 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38004 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38068 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38102 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38291 · Vendor Advisory