CVE-2025-39991
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2025-39991
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-39991.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2025-39991
- Downstream
- Related
- Published
- 2025-10-15T07:58:17.257Z
- Modified
- 2025-11-28T02:33:51.657984Z
- Summary
- wifi: ath11k: fix NULL dereference in ath11k_qmi_m3_load()
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
wifi: ath11k: fix NULL dereference in ath11kqmim3_load()
If ab->fw.m3data points to data, then fw pointer remains null. Further, if m3mem is not allocated, then fw is dereferenced to be passed to ath11k_err function.
Replace fw->size by m3_len.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
- Database specific
{ "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/39xxx/CVE-2025-39991.json", "cna_assigner": "Linux" }- References
-
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- https://git.kernel.org/stable/c/1f52119809b76d43759fc47da1cf708690b740a1
- https://git.kernel.org/stable/c/3fd2ef2ae2b5c955584a3bee8e83ae7d7a98f782
- https://git.kernel.org/stable/c/500fcc31e488d798937a23dbb1f62db46820c5b2
- https://git.kernel.org/stable/c/888830b2cbc035838bebefe94502976da94332a5
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/39xxx/CVE-2025-39991.json
- https://nvd.nist.gov/vuln/detail/CVE-2025-39991
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced7db88b962f06a52af5e9a32971012e8f3427cec0Fixed1f52119809b76d43759fc47da1cf708690b740a1Fixed888830b2cbc035838bebefe94502976da94332a5Fixed500fcc31e488d798937a23dbb1f62db46820c5b2Fixed3fd2ef2ae2b5c955584a3bee8e83ae7d7a98f782