CVE-2025-38406

wifi: ath6kl: remove WARN on bad firmware input

published July 25, 2025

CVSS
—
EPSS
0%
Percentile
8.4
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

wifi: ath6kl: remove WARN on bad firmware input

If the firmware gives bad input, that's nothing to do with

the driver's stack at this point etc., so the WARN_ON()

doesn't add any value. Additionally, this is one of the

top syzbot reports now. Just print a message, and as an

added bonus, print the sizes too.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00193 · 8.4th percentile
Published
2025-07-25T13:13Z
EPSS history
Timeline
  • 25 JUL 13:13Z
    wifi: ath6kl: remove WARN on bad firmware input
    cvelistv5