What’s Vulnerable › Vulnerabilities

CVE-2025-38096: wifi: iwlwifi: don't warn when if there is a FW error

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-07-03 · updated 2026-10-30

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: don't warn when if there is a FW error iwl_trans_reclaim is warning if it is called when the FW is not alive. But if it is called when there is a pending restart, i.e. after a FW error, there is no need to warn, instead - return silently.

Affected products

• Linux kernel: before 6.12.31; from 6.13 before 6.14.9 — fixed in 6.12.31, 6.14.9
• Linux: 4.5 — fixed in 6.15

How to fix

Upgrade to a fixed version: Linux kernel 6.12.31, 6.14.9; Linux 6.15. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/0446d34a853d9576e2a7628c803d2abd2f8cf3a8
• https://git.kernel.org/stable/c/0709bdf1faa6136c13808289b01db426cfd03ed7
• https://git.kernel.org/stable/c/20d00e9b5309107b30d882a67639d6fbbfaba36a
• https://git.kernel.org/stable/c/c7f50d0433a016d43681592836a3d484817bfb34
• https://git.kernel.org/stable/c/d07a08f42dc7230c902e1af2a899a72b0a03aa69

Get alerted when CVE-2025-38096 or the next vulnerability affects your stack