{"id":"CVE-2025-38656","summary":"wifi: iwlwifi: Fix error code in iwl_op_mode_dvm_start()","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: iwlwifi: Fix error code in iwl_op_mode_dvm_start()\n\nPreserve the error code if iwl_setup_deferred_work() fails.  The current\ncode returns ERR_PTR(0) (which is NULL) on this path.  I believe the\nmissing error code potentially leads to a use after free involving\ndebugfs.","modified":"2026-04-16T04:39:24.290781349Z","published":"2025-08-22T16:00:59.678Z","related":["CGA-rh76-3vf4-4ppc","SUSE-SU-2025:03272-1","SUSE-SU-2025:03290-1","SUSE-SU-2025:03301-1","SUSE-SU-2025:03382-1","SUSE-SU-2025:03602-1","SUSE-SU-2025:03633-1","SUSE-SU-2025:03634-1","SUSE-SU-2025:20653-1","SUSE-SU-2025:20669-1","SUSE-SU-2025:20739-1","SUSE-SU-2025:20756-1","SUSE-SU-2025:21074-1","SUSE-SU-2025:21139-1","SUSE-SU-2025:21179-1","SUSE-SU-2026:0473-1","openSUSE-SU-2025:20081-1"],"database_specific":{"cna_assigner":"Linux","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38656.json"},"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/1d068272c21d886d06526454b68368100ba0a720"},{"type":"WEB","url":"https://git.kernel.org/stable/c/991e2066f6009d3cb898413058c62dbcc92bd6d2"},{"type":"WEB","url":"https://git.kernel.org/stable/c/cf80c02a9fdb6c5bc8508beb6a0f6a1294fc32f6"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38656.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-38656"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"c0e43c3f6c0a79381b468574c241065998412b7c"},{"fixed":"991e2066f6009d3cb898413058c62dbcc92bd6d2"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"70a1b527eaea9430b1bd87de59f3b9f6bd225701"},{"fixed":"1d068272c21d886d06526454b68368100ba0a720"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"90a0d9f339960448a3acc1437a46730f975efd6a"},{"fixed":"cf80c02a9fdb6c5bc8508beb6a0f6a1294fc32f6"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"0"},{"last_affected":"c80832d445653baba5ac80cd2c2637c437ac881b"},{"last_affected":"b398120fbe0acfef60b16f6a0f69902d385d7728"},{"last_affected":"2e9f85ee3b46453a2f250a57d3a9f10c70c71202"},{"last_affected":"6663c52608d8d8727bf1911e6d9218069ba1c85e"},{"last_affected":"ca980f1911a7144d451d1c31298ab8507c6bd88f"},{"last_affected":"7dd6350307af6521b6240b295c93b7eec4daebe6"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-38656.json"}}],"schema_version":"1.7.5"}