CVE-2025-38045

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 36/100
Published: 2025-06-18 Modified: 2026-10-30 First seen: 2026-10-30 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: None
I: None
A: High

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: fix debug actions order The order of actions taken for debug was implemented incorrectly. Now we implemented the dump split and do the FW reset only in the middle of the dump (rather than the FW killing itself on error.) As a result, some of the actions taken when applying the config will now crash the device, so we need to fix the order.

Affected Software (7)

VendorProductVersion
Linux Linux f21baf244112e646c6b6c9db94834cf06358db06 < 49d7587274282fd92a7db6b70dfbc7c973f4f52b
Linux Linux f21baf244112e646c6b6c9db94834cf06358db06 < 2b790fe67ed483d86c1aeb8be6735bf792caa7e5
Linux Linux f21baf244112e646c6b6c9db94834cf06358db06 < 181e8b56b74ad3920456dcdc8a361520d9007956
Linux Linux f21baf244112e646c6b6c9db94834cf06358db06 < 328fbc96ecbee16c5fcbfcb3ac57b476f94da2f0
Linux Linux f21baf244112e646c6b6c9db94834cf06358db06 < eb29b4ffafb20281624dcd2cbb768d6f30edf600
Linux Linux 5.16
linux linux_kernel < 6.6.93

Bug Bounty Relevance

36 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

5.5 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS — Exploitation Probability

0.19%
Raw Score 0.001930
Percentile 9.0%
Date 2026-11-01

EPSS Trend

2026-11-01
0.00193
2026-10-31
0.00193
2026-10-30
0.00193
2026-10-29
0.00193

Intelligence Sources

mitre ref →
nvd ref →