CVE-2025-38096

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 36/100
Published: 2025-07-03 Modified: 2026-10-30 First seen: 2026-10-30 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: None
I: None
A: High

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: don't warn when if there is a FW error iwl_trans_reclaim is warning if it is called when the FW is not alive. But if it is called when there is a pending restart, i.e. after a FW error, there is no need to warn, instead - return silently.

Affected Software (7)

VendorProductVersion
Linux Linux e5d15cb530082cc13a6c9457eddd6f75b0f4de65 < 0709bdf1faa6136c13808289b01db426cfd03ed7
Linux Linux e5d15cb530082cc13a6c9457eddd6f75b0f4de65 < 20d00e9b5309107b30d882a67639d6fbbfaba36a
Linux Linux e5d15cb530082cc13a6c9457eddd6f75b0f4de65 < 0446d34a853d9576e2a7628c803d2abd2f8cf3a8
Linux Linux e5d15cb530082cc13a6c9457eddd6f75b0f4de65 < d07a08f42dc7230c902e1af2a899a72b0a03aa69
Linux Linux e5d15cb530082cc13a6c9457eddd6f75b0f4de65 < c7f50d0433a016d43681592836a3d484817bfb34
Linux Linux 4.5
linux linux_kernel < 6.12.31

Bug Bounty Relevance

36 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

5.5 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS — Exploitation Probability

0.22%
Raw Score 0.002240
Percentile 13.0%
Date 2026-11-01

EPSS Trend

2026-11-01
0.00224
2026-10-31
0.00224
2026-10-30
0.00224
2026-10-29
0.00224

Intelligence Sources

mitre ref →
nvd ref →