https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 12:29:55 +0000 https://vulnerability.circl.lu/vuln/cve-2025-38420 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>wifi: carl9170: do not ping device which has failed to load firmware</p> <p>Syzkaller reports [1, 2] crashes caused by an attempts to ping the device which has failed to load firmware. Since such a device doesn&#39;t pass &#39;ieee80211_register_hw()&#39;, an internal workqueue managed by &#39;ieee80211_queue_work()&#39; is not yet created and an attempt to queue work on it causes null-ptr-deref.</p> <p>[1] https://syzkaller.appspot.com/bug?extid=9a4aec827829942045ff [2] https://syzkaller.appspot.com/bug?extid=0d8afba53e8fb2633217</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>wifi: carl9170: do not ping device which has failed to load firmware</p> <p>Syzkaller reports [1, 2] crashes caused by an attempts to ping the device which has failed to load firmware. Since such a device doesn&#39;t pass &#39;ieee80211_register_hw()&#39;, an internal workqueue managed by &#39;ieee80211_queue_work()&#39; is not yet created and an attempt to queue work on it causes null-ptr-deref.</p> <p>[1] https://syzkaller.appspot.com/bug?extid=9a4aec827829942045ff [2] https://syzkaller.appspot.com/bug?extid=0d8afba53e8fb2633217</p> https://vulnerability.circl.lu/vuln/cve-2025-38420