-

CVE-2025-39991

wifi: ath11k: fix NULL dereference in ath11k_qmi_m3_load()

In the Linux kernel, the following vulnerability has been resolved:

wifi: ath11k: fix NULL dereference in ath11k_qmi_m3_load()

If ab->fw.m3_data points to data, then fw pointer remains null.
Further, if m3_mem is not allocated, then fw is dereferenced to be
passed to ath11k_err function.

Replace fw->size by m3_len.

Found by Linux Verification Center (linuxtesting.org) with SVACE.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 7db88b962f06a52af5e9a32971012e8f3427cec0
Version < 1f52119809b76d43759fc47da1cf708690b740a1
Status affected
Version 7db88b962f06a52af5e9a32971012e8f3427cec0
Version < 888830b2cbc035838bebefe94502976da94332a5
Status affected
Version 7db88b962f06a52af5e9a32971012e8f3427cec0
Version < 500fcc31e488d798937a23dbb1f62db46820c5b2
Status affected
Version 7db88b962f06a52af5e9a32971012e8f3427cec0
Version < 3fd2ef2ae2b5c955584a3bee8e83ae7d7a98f782
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 6.7
Status affected
Version 0
Version < 6.7
Status unaffected
Version <= 6.12.*
Version 6.12.51
Status unaffected
Version <= 6.16.*
Version 6.16.11
Status unaffected
Version <= 6.17.*
Version 6.17.1
Status unaffected
Version <= *
Version 6.18
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.03% 0.092
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.