CVE-2025-38121

wifi: iwlwifi: mld: avoid panic on init failure

published July 3, 2025

CVSS
—
EPSS
0%
Percentile
4.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

wifi: iwlwifi: mld: avoid panic on init failure

In case of an error during init, in_hw_restart will be set, but it will

never get cleared.

Instead, we will retry to init again, and then we will act like we are in a

restart when we are actually not.

This causes (among others) to a NULL pointer dereference when canceling

rx_omi::finished_work, that was not even initialized, because we thought

that we are in hw_restart.

Set in_hw_restart to true only if the fw is running, then we know that

FW was loaded successfully and we are not going to the retry loop.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00159 · 4.7th percentile
Published
2025-07-03T08:35Z
EPSS history
Timeline
  • 03 JUL 08:35Z
    wifi: iwlwifi: mld: avoid panic on init failure
    cvelistv5