Review reviewHigh

CVE-2025-38656

Linux Linux, linux kernel

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: Fix error code in iwl_op_mode_dvm_start() Preserve the error code if iwl_setup_deferred_work() fails. The current code returns ERR_PTR(0) (which is NULL) on this path. I believe the missing error code potentially leads to a use after free involving debugfs.

CVSS: 7.8
EPSS: -
CISA KEV: Not listed
Published: 2025.08.23

PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV

Exploit probability-

Technical severityCVSS 7.8

Vulnerability overview

Affected product and versions

Product: Linux Linux, linux kernel
Affected versions: >= c0e43c3f6c0a79381b468574c241065998412b7c < 991e2066f6009d3cb898413058c62dbcc92bd6d2, >= 70a1b527eaea9430b1bd87de59f3b9f6bd225701 < 1d068272c21d886d06526454b68368100ba0a720, >= 90a0d9f339960448a3acc1437a46730f975efd6a < cf80c02a9fdb6c5bc8508beb6a0f6a1294fc32f6, >= c80832d445653baba5ac80cd2c2637c437ac881b, >= b398120fbe0acfef60b16f6a0f69902d385d7728, >= 2e9f85ee3b46453a2f250a57d3a9f10c70c71202, >= 6663c52608d8d8727bf1911e6d9218069ba1c85e, >= ca980f1911a7144d451d1c31298ab8507c6bd88f, >= 7dd6350307af6521b6240b295c93b7eec4daebe6, >= 5.4.297 < 5.5, >= 5.10.241 < 5.11, >= 5.15.190 < 5.16, >= 6.1.148 < 6.2, >= 6.6.102 < 6.7, >= 6.12.42 < 6.13
Fixed versions: 5.5, 5.11, 5.16, 6.2, 6.7, 6.13

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide

1
Identify
Confirm that Linux Linux, linux kernel and an affected version are present.
2
Prioritize
Combine exploitation signals with asset exposure and business criticality.
3
Remediate
Follow the vendor advisory or supported update path and preserve rollback options.
4
Verify
Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE: CWE-416