VDB

CVE-2025-38157

CVE-2025-38157 PUBLISHED

wifi: ath9k_htc: Abort software beacon handling if disabled

Reported by linux · Published July 3, 2025

In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k_htc: Abort software beacon handling if disabled A malicious USB device can send a WMI_SWBA_EVENTID event from an ath9k_htc-managed device before beaconing has been enabled. This causes a device-by-zero error in the driver, leading to either a crash or an out of bounds read. Prevent this by aborting the handling in ath9k_htc_swba() if beacons are not enabled.

Affected products

VendorProductVersions
LinuxLinux832f6a18fc2aead14954c081ece03b7a5b425f81, 832f6a18fc2aead14954c081ece03b7a5b425f81, 832f6a18fc2aead14954c081ece03b7a5b425f81
LinuxLinux3.0, 0, 5.4.295
linuxlinux_kernel3.0, 3.0, 3.0
LinuxLinux832f6a18fc2aead14954c081ece03b7a5b425f81, 832f6a18fc2aead14954c081ece03b7a5b425f81, 832f6a18fc2aead14954c081ece03b7a5b425f81

Timeline

  • Jul 2, 2025 CVE Published
  • Jul 3, 2025 EPSS Score (30 in total, the first dated here)
  • Oct 12, 2025 PoC Published (11 in total, the first dated here)
  • Dec 18, 2025 CVE Updated
  • Mar 29, 2026 Distribution Patch (224 in total, the first dated here)
  • Mar 29, 2026 Security Advisory (238 in total, the first dated here)
  • Jun 9, 2026 Coalition ESS Score

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CVE-2025-38157
vulnetix vdb fixes CVE-2025-38157

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CVE-2025-38157/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Look up in the Resolve Platform →
$ Lookup Community · 50/day Open Lookup ›