CVE-2025-38406

wifi: ath6kl: remove WARN on bad firmware input

MEDIUM

5.5

CVSS Score

Published: July 25, 2025 at 01:13 PM UTC

Updated: June 17, 2026 at 09:16 AM UTC

2 products affected across 2 vendorsLinux KernelDebian Linux

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.5

Exploit prediction

EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: remove WARN on bad firmware input If the firmware gives bad input, that's nothing to do with the driver's stack at this point etc., so the WARN_ON() doesn't add any value. Additionally, this is one of the top syzbot reports now. Just print a message, and as an added bonus, print the sizes too.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Debian Linux · Debiandrupal

95%

11.0

Linux Kernel · Linux

95%

v < 5.4.2963.2 ≤ v < 5.10.2403.2 ≤ v < 5.15.1873.2 ≤ v < 5.4.2963.2 ≤ v < 6.1.1443.2 ≤ v < 6.12.373.2 ≤ v < 6.15.63.2 ≤ v < 6.163.2 ≤ v < 6.6.975.11 ≤ v < 5.15.1875.16 ≤ v < 6.1.1445.5 ≤ v < 5.10.2406.13 ≤ v < 6.15.66.2 ≤ v < 6.6.976.7 ≤ v < 6.12.373.2 6.16 rc1 6.16 rc2bdcd81707973cf8aa9305337166f8ee842a050d4

Vendor states this is fixed in 27d07deea35ae67f2e75913242e25bdb7e1114e5 (fixed)

Vendor states this is fixed in 327997afbb5e62532c28c1861ab5534c01969c9a (fixed)

Vendor states this is fixed in 347827bd0c5680dac2dd59674616840c4d5154f1 (fixed)

Vendor states this is fixed in 46b47d4b06fa7f234d93f0f8ac43798feafcff89 (fixed)

Vendor states this is fixed in 7a2afdc5af3b82b601f6a2f0d1c90d5f0bc27aeb (fixed)

Vendor states this is fixed in 89bd133529a4d2d68287128b357e49adc00ec690 (fixed)

Vendor states this is fixed in e6c49f0b203a987c306676d241066451b74db1a5 (fixed)

Vendor states this is fixed in e7417421d89358da071fd2930f91e67c7128fbff (fixed)

Vendor states this is fixed in 3.2 (unaffected)

Vendor states this is fixed in 5.10.240 (unaffected)

Vendor states this is fixed in 5.15.187 (unaffected)

Vendor states this is fixed in 5.4.296 (unaffected)