CVE-2025-38602

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-38602
In the Linux kernel, the following vulnerability has been resolved: iwlwifi: Add missing check for alloc_ordered_workqueue Add check for the return value of alloc_ordered_workqueue since it may return NULL pointer.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/2e9f85ee3b46453a2f250a57d3a9f10c70c71202 Patch
https://git.kernel.org/stable/c/6663c52608d8d8727bf1911e6d9218069ba1c85e Patch
https://git.kernel.org/stable/c/70a1b527eaea9430b1bd87de59f3b9f6bd225701 Patch
https://git.kernel.org/stable/c/7dd6350307af6521b6240b295c93b7eec4daebe6 Patch
https://git.kernel.org/stable/c/90a0d9f339960448a3acc1437a46730f975efd6a Patch
https://git.kernel.org/stable/c/b398120fbe0acfef60b16f6a0f69902d385d7728 Patch
https://git.kernel.org/stable/c/c0e43c3f6c0a79381b468574c241065998412b7c Patch
https://git.kernel.org/stable/c/c80832d445653baba5ac80cd2c2637c437ac881b Patch
https://git.kernel.org/stable/c/ca980f1911a7144d451d1c31298ab8507c6bd88f Patch
https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html Third Party Advisory
https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html Third Party Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
History

07 Jan 2026, 18:38

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/2e9f85ee3b46453a2f250a57d3a9f10c70c71202 - () https://git.kernel.org/stable/c/2e9f85ee3b46453a2f250a57d3a9f10c70c71202 - Patch
References () https://git.kernel.org/stable/c/6663c52608d8d8727bf1911e6d9218069ba1c85e - () https://git.kernel.org/stable/c/6663c52608d8d8727bf1911e6d9218069ba1c85e - Patch
References () https://git.kernel.org/stable/c/70a1b527eaea9430b1bd87de59f3b9f6bd225701 - () https://git.kernel.org/stable/c/70a1b527eaea9430b1bd87de59f3b9f6bd225701 - Patch
References () https://git.kernel.org/stable/c/7dd6350307af6521b6240b295c93b7eec4daebe6 - () https://git.kernel.org/stable/c/7dd6350307af6521b6240b295c93b7eec4daebe6 - Patch
References () https://git.kernel.org/stable/c/90a0d9f339960448a3acc1437a46730f975efd6a - () https://git.kernel.org/stable/c/90a0d9f339960448a3acc1437a46730f975efd6a - Patch
References () https://git.kernel.org/stable/c/b398120fbe0acfef60b16f6a0f69902d385d7728 - () https://git.kernel.org/stable/c/b398120fbe0acfef60b16f6a0f69902d385d7728 - Patch
References () https://git.kernel.org/stable/c/c0e43c3f6c0a79381b468574c241065998412b7c - () https://git.kernel.org/stable/c/c0e43c3f6c0a79381b468574c241065998412b7c - Patch
References () https://git.kernel.org/stable/c/c80832d445653baba5ac80cd2c2637c437ac881b - () https://git.kernel.org/stable/c/c80832d445653baba5ac80cd2c2637c437ac881b - Patch
References () https://git.kernel.org/stable/c/ca980f1911a7144d451d1c31298ab8507c6bd88f - () https://git.kernel.org/stable/c/ca980f1911a7144d451d1c31298ab8507c6bd88f - Patch
References () https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html - () https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html - Third Party Advisory
References () https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html - () https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html - Third Party Advisory
CWE CWE-252
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
First Time Linux
Debian
Debian debian Linux
Linux linux Kernel
CPE cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

03 Nov 2025, 18:16

Type Values Removed Values Added
References
  • () https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html -
  • () https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html -

28 Aug 2025, 15:15

Type Values Removed Values Added
References
  • () https://git.kernel.org/stable/c/2e9f85ee3b46453a2f250a57d3a9f10c70c71202 -
  • () https://git.kernel.org/stable/c/b398120fbe0acfef60b16f6a0f69902d385d7728 -
  • () https://git.kernel.org/stable/c/c80832d445653baba5ac80cd2c2637c437ac881b -

20 Aug 2025, 14:40

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: iwlwifi: Agregar verificación faltante para alloc_ordered_workqueue Agregar verificación para el valor de retorno de alloc_ordered_workqueue ya que puede devolver un puntero NULL.

19 Aug 2025, 17:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-08-19 17:15

Updated : 2026-01-07 18:38

NVD link : CVE-2025-38602

Mitre link : CVE-2025-38602

CVE.ORG link : CVE-2025-38602

JSON object : View

Products Affected

debian

  • debian_linux

linux

  • linux_kernel
CWE
CWE-252

Unchecked Return Value