CVE-2025-39991
wifi: ath11k: fix NULL dereference in ath11k_qmi_m3_load()
Reported by linux · Published October 15, 2025
In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix NULL dereference in ath11k_qmi_m3_load() If ab->fw.m3_data points to data, then fw pointer remains null. Further, if m3_mem is not allocated, then fw is dereferenced to be passed to ath11k_err function. Replace fw->size by m3_len. Found by Linux Verification Center (linuxtesting.org) with SVACE.
EPSS 0.20% · 9.8th percentile
Fixed versions
Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.
| Package | Ecosystem | Fixed in |
|---|---|---|
| Linux | Linux | 888830b2cbc035838bebefe94502976da94332a5, 3fd2ef2ae2b5c955584a3bee8e83ae7d7a98f782, 1f52119809b76d43759fc47da1cf708690b740a1 |
Risk scores
Affected products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | 98e373dc08187c3f1cd97342b369fa2b0f24005e, 7db88b962f06a52af5e9a32971012e8f3427cec0, 7db88b962f06a52af5e9a32971012e8f3427cec0 |
| Linux | Linux | 6.7, 0, 6.12.51 |
| Linux | Linux | 98e373dc08187c3f1cd97342b369fa2b0f24005e, 6.18, 6.12.51 |
| linux | linux_kernel | 6.7, 6.7, 6.7 |
Timeline
- Oct 12, 2025 PoC Published (5 in total, the first dated here)
- Oct 14, 2025 CVE Published
- Oct 15, 2025 EPSS Score (30 in total, the first dated here)
- Oct 15, 2025 Coalition ESS Score (5 in total, the first dated here)
- Dec 15, 2025 Security Advisory (138 in total, the first dated here)
- Mar 29, 2026 Distribution Patch (130 in total, the first dated here)
- Oct 5, 2026 CVE Updated
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln CVE-2025-39991
vulnetix vdb fixes CVE-2025-39991Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/CVE-2025-39991/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart