In the Linux kernel, the following vulnerability has been resolved:
wifi: ath9k_htc: Abort software beacon handling if disabled
A malicious USB device can send a WMISWBAEVENTID event from an ath9k_htc-managed device before beaconing has been enabled. This causes a device-by-zero error in the driver, leading to either a crash or an out of bounds read.
Prevent this by aborting the handling in ath9khtcswba() if beacons are not enabled.
[
{
"digest": {
"line_hashes": [
"99011219130773496022091669089060167016",
"263617055503948163391105947532179922687",
"111172563669167376528206729229421301233"
],
"threshold": 0.9
},
"target": {
"file": "drivers/net/wireless/ath/ath9k/htc_drv_beacon.c"
},
"signature_type": "Line",
"id": "CVE-2025-38157-06170fc0",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7ee3fb6258da8c890a51b514f60d7570dc703605",
"deprecated": false
},
{
"digest": {
"line_hashes": [
"99011219130773496022091669089060167016",
"263617055503948163391105947532179922687",
"111172563669167376528206729229421301233"
],
"threshold": 0.9
},
"target": {
"file": "drivers/net/wireless/ath/ath9k/htc_drv_beacon.c"
},
"signature_type": "Line",
"id": "CVE-2025-38157-077f09a6",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0281c19074976ec48f0078d50530b406ddae75bc",
"deprecated": false
},
{
"digest": {
"length": 785.0,
"function_hash": "124775738065591450950356460068273885838"
},
"target": {
"file": "drivers/net/wireless/ath/ath9k/htc_drv_beacon.c",
"function": "ath9k_htc_swba"
},
"signature_type": "Function",
"id": "CVE-2025-38157-6d7eb5b7",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5a85c21f812e02cb00ca07007d88acdd42d08c46",
"deprecated": false
},
{
"digest": {
"line_hashes": [
"99011219130773496022091669089060167016",
"263617055503948163391105947532179922687",
"111172563669167376528206729229421301233"
],
"threshold": 0.9
},
"target": {
"file": "drivers/net/wireless/ath/ath9k/htc_drv_beacon.c"
},
"signature_type": "Line",
"id": "CVE-2025-38157-89836be2",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ee5ee646385f5846dcbc881389f3c44a197c402a",
"deprecated": false
},
{
"digest": {
"line_hashes": [
"99011219130773496022091669089060167016",
"263617055503948163391105947532179922687",
"111172563669167376528206729229421301233"
],
"threshold": 0.9
},
"target": {
"file": "drivers/net/wireless/ath/ath9k/htc_drv_beacon.c"
},
"signature_type": "Line",
"id": "CVE-2025-38157-929cbfab",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5a85c21f812e02cb00ca07007d88acdd42d08c46",
"deprecated": false
},
{
"digest": {
"length": 785.0,
"function_hash": "124775738065591450950356460068273885838"
},
"target": {
"file": "drivers/net/wireless/ath/ath9k/htc_drv_beacon.c",
"function": "ath9k_htc_swba"
},
"signature_type": "Function",
"id": "CVE-2025-38157-bf47abd9",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7ee3fb6258da8c890a51b514f60d7570dc703605",
"deprecated": false
},
{
"digest": {
"length": 785.0,
"function_hash": "124775738065591450950356460068273885838"
},
"target": {
"file": "drivers/net/wireless/ath/ath9k/htc_drv_beacon.c",
"function": "ath9k_htc_swba"
},
"signature_type": "Function",
"id": "CVE-2025-38157-d95fd5ea",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0281c19074976ec48f0078d50530b406ddae75bc",
"deprecated": false
},
{
"digest": {
"length": 785.0,
"function_hash": "124775738065591450950356460068273885838"
},
"target": {
"file": "drivers/net/wireless/ath/ath9k/htc_drv_beacon.c",
"function": "ath9k_htc_swba"
},
"signature_type": "Function",
"id": "CVE-2025-38157-fe1bc0f9",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ee5ee646385f5846dcbc881389f3c44a197c402a",
"deprecated": false
}
]