CVE-2025-38406

Summary

In the Linux kernel, the following vulnerability has been resolved:

wifi: ath6kl: remove WARN on bad firmware input

If the firmware gives bad input, that's nothing to do with the driver's stack at this point etc., so the WARN_ON() doesn't add any value. Additionally, this is one of the top syzbot reports now. Just print a message, and as an added bonus, print the sizes too.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxbdcd81707973cf8aa9305337166f8ee842a050d4 < 7a2afdc5af3b82b601f6a2f0d1c90d5f0bc27aebaffected
LinuxLinuxbdcd81707973cf8aa9305337166f8ee842a050d4 < e6c49f0b203a987c306676d241066451b74db1a5affected
LinuxLinuxbdcd81707973cf8aa9305337166f8ee842a050d4 < 46b47d4b06fa7f234d93f0f8ac43798feafcff89affected
LinuxLinuxbdcd81707973cf8aa9305337166f8ee842a050d4 < 89bd133529a4d2d68287128b357e49adc00ec690affected
LinuxLinuxbdcd81707973cf8aa9305337166f8ee842a050d4 < 347827bd0c5680dac2dd59674616840c4d5154f1affected
LinuxLinuxbdcd81707973cf8aa9305337166f8ee842a050d4 < 327997afbb5e62532c28c1861ab5534c01969c9aaffected
LinuxLinuxbdcd81707973cf8aa9305337166f8ee842a050d4 < 27d07deea35ae67f2e75913242e25bdb7e1114e5affected
LinuxLinuxbdcd81707973cf8aa9305337166f8ee842a050d4 < e7417421d89358da071fd2930f91e67c7128fbffaffected
LinuxLinux3.2affected
LinuxLinux0 < 3.2unaffected
LinuxLinux5.4.296 <= 5.4.*unaffected
LinuxLinux5.10.240 <= 5.10.*unaffected
LinuxLinux5.15.187 <= 5.15.*unaffected
LinuxLinux6.1.144 <= 6.1.*unaffected
LinuxLinux6.6.97 <= 6.6.*unaffected
LinuxLinux6.12.37 <= 6.12.*unaffected
LinuxLinux6.15.6 <= 6.15.*unaffected
LinuxLinux6.16 <= *unaffected

Weaknesses

ADP Enrichment

CVE Program Container

Additional References

References