CVE-2025-38096
MEDIUM severity · CVSS 5.5
5.5CVSS MEDIUM
Summary
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: don't warn when if there is a FW error iwl_trans_reclaim is warning if it is called when the FW is not alive. But if it is called when there is a pending restart, i.e. after a FW error, there is no need to warn, instead - return silently.
Impact & exploitability
Attack vectorLocal
Attack complexityLow
Privileges requiredLow
User interactionNone
Confidentiality impactNone
Integrity impactNone
Availability impactHigh
Exploit probability (EPSS)0%
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Affected products we track (1)
Recommendation
Apply the vendor fix in your normal patch cycle. Open any affected product above for its exact safe version.
Official patch: https://git.kernel.org/stable/c/0446d34a853d9576e2a7628c803d2abd2f8cf3a8 ↗
Additional information
- NVD record
- https://git.kernel.org/stable/c/0446d34a853d9576e2a7628c803d2abd2f8cf3a8Patch
- https://git.kernel.org/stable/c/c7f50d0433a016d43681592836a3d484817bfb34Patch
- https://git.kernel.org/stable/c/d07a08f42dc7230c902e1af2a899a72b0a03aa69Patch
- https://git.kernel.org/stable/c/0709bdf1faa6136c13808289b01db426cfd03ed7
- https://git.kernel.org/stable/c/20d00e9b5309107b30d882a67639d6fbbfaba36a