Answer in brief
CVE-2025-38656 records a Unknown severity vulnerability in wifi: iwlwifi: Fix error code in iwl_op_mode_dvm_start(). The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=c0e43c3f6c0a79381b468574c241065998412b7c <991e2066f6009d3cb898413058c62dbcc92bd6d2 || >=70a1b527eaea9430b1bd87de59f3b9f6bd225701 <1d068272c21d886d06526454b68368100ba0a720 || >=90a0d9f339960448a3acc1437a46730f975efd6a <cf80c02a9fdb6c5bc8508beb6a0f6a1294fc32f6 || c80832d445653baba5ac80cd2c2637c437ac881b || b398120fbe0acfef60b16f6a0f69902d385d7728 || 2e9f85ee3b46453a2f250a57d3a9f10c70c71202 || 6663c52608d8d8727bf1911e6d9218069ba1c85e || ca980f1911a7144d451d1c31298ab8507c6bd88f || 7dd6350307af6521b6240b295c93b7eec4daebe6 || >=5.4.297 <5.5 || >=5.10.241 <5.11 || >=5.15.190 <5.16 || >=6.1.148 <6.2 || >=6.6.102 <6.7 || >=6.12.42 <6.13 | 991e2066f6009d3cb898413058c62dbcc92bd6d2, 1d068272c21d886d06526454b68368100ba0a720, cf80c02a9fdb6c5bc8508beb6a0f6a1294fc32f6, 5.5, 5.11, 5.16, 6.2, 6.7, 6.13 |
Published upstream
Aug 22, 2025
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 5, 2026
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: Fix error code in iwl_op_mode_dvm_start() Preserve the error code if iwl_setup_deferred_work() fails. The current code returns ERR_PTR(0) (which is NULL) on this path. I believe the missing error code potentially leads to a use after free involving debugfs.
Quoted source text, attributed separately from HOL analysis.
Answer in brief
CVE-2025-38656 records a Unknown severity vulnerability in wifi: iwlwifi: Fix error code in iwl_op_mode_dvm_start(). The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=c0e43c3f6c0a79381b468574c241065998412b7c <991e2066f6009d3cb898413058c62dbcc92bd6d2 || >=70a1b527eaea9430b1bd87de59f3b9f6bd225701 <1d068272c21d886d06526454b68368100ba0a720 || >=90a0d9f339960448a3acc1437a46730f975efd6a <cf80c02a9fdb6c5bc8508beb6a0f6a1294fc32f6 || c80832d445653baba5ac80cd2c2637c437ac881b || b398120fbe0acfef60b16f6a0f69902d385d7728 || 2e9f85ee3b46453a2f250a57d3a9f10c70c71202 || 6663c52608d8d8727bf1911e6d9218069ba1c85e || ca980f1911a7144d451d1c31298ab8507c6bd88f || 7dd6350307af6521b6240b295c93b7eec4daebe6 || >=5.4.297 <5.5 || >=5.10.241 <5.11 || >=5.15.190 <5.16 || >=6.1.148 <6.2 || >=6.6.102 <6.7 || >=6.12.42 <6.13 | 991e2066f6009d3cb898413058c62dbcc92bd6d2, 1d068272c21d886d06526454b68368100ba0a720, cf80c02a9fdb6c5bc8508beb6a0f6a1294fc32f6, 5.5, 5.11, 5.16, 6.2, 6.7, 6.13 |
Published upstream
Aug 22, 2025
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 5, 2026
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: Fix error code in iwl_op_mode_dvm_start() Preserve the error code if iwl_setup_deferred_work() fails. The current code returns ERR_PTR(0) (which is NULL) on this path. I believe the missing error code potentially leads to a use after free involving debugfs.
Quoted source text, attributed separately from HOL analysis.