PT-2025-33802 · Realtek+6 · Rtl818X+7
Published
2025-06-17
·
Updated
2026-04-20
·
CVE-2025-38604
CVSS v2.0
5.7
Medium
| Vector | AV:L/AC:L/Au:S/C:P/I:P/A:C |
Name of the Vulnerable Software and Affected Versions:
Linux kernel (affected versions not specified)
Description:
A flaw exists in the Linux kernel's Wi-Fi driver for rtl818x devices. Specifically, the issue involves the order of operations during the
rtl8187 stop() function. Failing to kill URBs (USB requests) before clearing the transmit status queue can lead to callbacks operating on already freed memory, resulting in a kernel NULL pointer dereference. This can cause a system crash. The vulnerability was discovered through testing on an RTL8187BvE device using SVACE by the Linux Verification Center.Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Use After Free
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Debian
Linuxmint
Linux Kernel
Rtl8187Bve
Red Os
Suse
Ubuntu
Rtl818X