PT-2025-34408 · Linux+1 · Linux Kernel+1

Published 2025-06-04 · Updated 2025-08-22 · CVE-2025-38647

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.15.0+

Description: The Linux kernel contains a flaw within the rtw89 driver related to a lockdep assertion in the rtw89 set sar from acpi function. The assertion was triggered during driver startup and has been dropped as it appeared unnecessary during the early initialization stage. This issue was found by the Linux Verification Center.

Recommendations: Update to Linux kernel version 6.15.0+ or later.

Exploit

Fix

Weakness Enumeration

CWE-413

Related Identifiers

BDU:2026-03095

CVE-2025-38647

Affected Products

Astra Linux

Linux Kernel

References · 13

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38647.json · Exploit
• https://cve.org/CVERecord?id=CVE-2025-38647 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-38647 · Security Note
• https://ubuntu.com/security/CVE-2025-38647 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-03095 · Security Note
• https://git.kernel.org/stable/c/f7ac6df92eee030151476078069dc3eb0002dfb0 · Patch
• https://git.kernel.org/stable/c/6fe21445f7e801de5527d420f8e25e97b0cdd7e2 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-38647 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-38647 · Vendor Advisory
• https://twitter.com/CVEnew/status/1958933905588772923 · Twitter Post
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://lore.kernel.org/linux-cve-announce/2025082236-CVE-2025-38647-af0d@gregkh · Note
• https://git.kernel.org/linus/6fe21445f7e801de5527d420f8e25e97b0cdd7e2 · Note