CVE-2025-38642

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-38642
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix WARN_ON for monitor mode on some devices On devices without WANT_MONITOR_VIF (and probably without channel context support) we get a WARN_ON for changing the per-link setting of a monitor interface. Since we already skip AP_VLAN interfaces and MONITOR with WANT_MONITOR_VIF and/or NO_VIRTUAL_MONITOR should update the settings, catch this in the link change code instead of the warning.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/1e10ded6b0f9b0eeefaacbb6c6c6afff3f702812 Patch
https://git.kernel.org/stable/c/c57e5b9819dfd16d709bcd6cb633301ed0829a66 Patch
https://git.kernel.org/stable/c/ff15498ebaa49c5429a74e70a1951dede60cd14c Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

26 Nov 2025, 16:38

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/1e10ded6b0f9b0eeefaacbb6c6c6afff3f702812 - () https://git.kernel.org/stable/c/1e10ded6b0f9b0eeefaacbb6c6c6afff3f702812 - Patch
References () https://git.kernel.org/stable/c/c57e5b9819dfd16d709bcd6cb633301ed0829a66 - () https://git.kernel.org/stable/c/c57e5b9819dfd16d709bcd6cb633301ed0829a66 - Patch
References () https://git.kernel.org/stable/c/ff15498ebaa49c5429a74e70a1951dede60cd14c - () https://git.kernel.org/stable/c/ff15498ebaa49c5429a74e70a1951dede60cd14c - Patch
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CWE CWE-617
First Time Linux
Linux linux Kernel
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: wifi: mac80211: corrección de WARN_ON para el modo monitor en algunos dispositivos. En dispositivos sin WANT_MONITOR_VIF (y probablemente sin compatibilidad con contexto de canal), recibimos un WARN_ON al cambiar la configuración por enlace de una interfaz de monitor. Dado que ya omitimos las interfaces AP_VLAN y MONITOR con WANT_MONITOR_VIF o NO_VIRTUAL_MONITOR debería actualizar la configuración, se debe incluir esto en el código de cambio de enlace en lugar de la advertencia.
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

22 Aug 2025, 16:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-08-22 16:15

Updated : 2025-11-26 16:38

NVD link : CVE-2025-38642

Mitre link : CVE-2025-38642

CVE.ORG link : CVE-2025-38642

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-617

Reachable Assertion