CVE-2025-38414

CVE-2025-38414

Medium · published July 25, 2025

CVSS v3.1
5.5
EPSS
0%
Percentile
6.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

wifi: ath12k: fix GCC_GCC_PCIE_HOT_RST definition for WCN7850

GCC_GCC_PCIE_HOT_RST is wrongly defined for WCN7850, causing kernel crash

on some specific platforms.

Since this register is divergent for WCN7850 and QCN9274, move it to

register table to allow different definitions. Then correct the register

address for WCN7850 to fix this issue.

Note IPQ5332 is not affected as it is not PCIe based device.

Tested-on: WCN7850 hw2.0 PCI WLAN.HMT.1.0.c5-00481-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00176 · 6.8th percentile
Published
2025-07-25T18:15Z
Affected products (3)
ProductVersionsFixed in
linux/linux_kernel≥ 6.3, < 6.12.346.12.34
linux/linux_kernel≥ 6.13, < 6.15.36.15.3
linux/linux_kernelall versions—
References (4)
EPSS history
Timeline
  • 25 JUL 13:32Z
    wifi: ath12k: fix GCC_GCC_PCIE_HOT_RST definition for WCN7850
    cvelistv5