PT-2025-34417 · Linux+3 · Linux Kernel+3

Published 2025-07-01 · Updated 2026-03-05 · CVE-2025-38656

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The Linux kernel contains an issue within the iwlwifi module related to error handling in the iwl op mode dvm start() function. Specifically, the code was returning an incorrect error code (NULL) when iwl setup deferred work() failed, potentially leading to a use-after-free condition involving debugfs.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

AZL-71023

AZL-78267

BDU:2026-03076

CVE-2025-38656

MGASA-2025-0234

MGASA-2025-0235

OPENSUSE-SU-2025:20081-1

SUSE-SU-2025:03272-1

SUSE-SU-2025:03290-1

SUSE-SU-2025:03301-1

SUSE-SU-2025:03382-1

SUSE-SU-2025:03602-1

SUSE-SU-2025:03633-1

SUSE-SU-2025:03634-1

SUSE-SU-2025:20653-1

SUSE-SU-2025:20669-1

SUSE-SU-2025:20739-1

SUSE-SU-2025:20756-1

SUSE-SU-2025:21074-1

SUSE-SU-2025:21139-1

SUSE-SU-2025:21179-1

SUSE-SU-2025_03272-1

SUSE-SU-2025_03290-1

SUSE-SU-2025_03301-1

SUSE-SU-2025_03382-1

SUSE-SU-2026:0473-1

Affected Products

Astra Linux

Linux Kernel

Suse

Iwlwifi

References · 2056

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38656.json · Exploit
• https://osv.dev/vulnerability/openSUSE-SU-2025:20081-1 · Vendor Advisory
• https://git.kernel.org/stable/c/991e2066f6009d3cb898413058c62dbcc92bd6d2 · Patch
• https://ubuntu.com/security/CVE-2025-38656 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:20739-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:03290-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:21139-1 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2025-0235 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2025-0234.html · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:03382-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:03634-1 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2025-0234 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-03076 · Security Note
• https://git.kernel.org/stable/c/cf80c02a9fdb6c5bc8508beb6a0f6a1294fc32f6 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:20756-1 · Vendor Advisory