-

CVE-2025-39991

In the Linux kernel, the following vulnerability has been resolved:

wifi: ath11k: fix NULL dereference in ath11k_qmi_m3_load()

If ab->fw.m3_data points to data, then fw pointer remains null.
Further, if m3_mem is not allocated, then fw is dereferenced to be
passed to ath11k_err function.

Replace fw->size by m3_len.

Found by Linux Verification Center (linuxtesting.org) with SVACE.
Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version < 1f52119809b76d43759fc47da1cf708690b740a1
Version 7db88b962f06a52af5e9a32971012e8f3427cec0
Status affected
Version < 888830b2cbc035838bebefe94502976da94332a5
Version 7db88b962f06a52af5e9a32971012e8f3427cec0
Status affected
Version < 500fcc31e488d798937a23dbb1f62db46820c5b2
Version 7db88b962f06a52af5e9a32971012e8f3427cec0
Status affected
Version < 3fd2ef2ae2b5c955584a3bee8e83ae7d7a98f782
Version 7db88b962f06a52af5e9a32971012e8f3427cec0
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 6.7
Status affected
Version < 6.7
Version 0
Status unaffected
Version <= 6.12.*
Version 6.12.51
Status unaffected
Version <= 6.16.*
Version 6.16.11
Status unaffected
Version <= 6.17.*
Version 6.17.1
Status unaffected
Version <= *
Version 6.18
Status unaffected
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.03% 0.059
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String