In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k_htc: Abort software beacon handling if disabled A malicious USB device can send a WMI_SWBA_EVENTID event from an ath9k_htc-managed device before beaconing has been enabled. This causes a device-by-zero error in the driver, leading to either a crash or an out of bounds read. Prevent this by aborting the handling in ath9k_htc_swba() if beacons are not enabled.
CVE-2025-38157
CVSS base score
7.8 (v3.1)
Severity
HIGH
Attack vector
Local
Weakness
CWE-787
Last modified
November 5, 2026
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
linux linux kernel
debian debian linux
References
- git.kernel.org Patch
- git.kernel.org Patch
- git.kernel.org Patch
- git.kernel.org Patch
- git.kernel.org Patch
- git.kernel.org Patch
- git.kernel.org Patch
- git.kernel.org Patch
- lists.debian.org Third Party Advisory
- lists.debian.org Third Party Advisory