{"affected":[{"defaultStatus":"unaffected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"lessThan":"e5ce9df1d68094d37360dbd9b09289d42fa21e54","status":"affected","version":"832f6a18fc2aead14954c081ece03b7a5b425f81","versionType":"git"},{"lessThan":"0281c19074976ec48f0078d50530b406ddae75bc","status":"affected","version":"832f6a18fc2aead14954c081ece03b7a5b425f81","versionType":"git"},{"lessThan":"7ee3fb6258da8c890a51b514f60d7570dc703605","status":"affected","version":"832f6a18fc2aead14954c081ece03b7a5b425f81","versionType":"git"},{"lessThan":"40471b23147c86ea3ed97faee79937c618250bd0","status":"affected","version":"832f6a18fc2aead14954c081ece03b7a5b425f81","versionType":"git"},{"lessThan":"5482ef9875eaa43f0435e14570e1193823de857e","status":"affected","version":"832f6a18fc2aead14954c081ece03b7a5b425f81","versionType":"git"},{"lessThan":"ee5ee646385f5846dcbc881389f3c44a197c402a","status":"affected","version":"832f6a18fc2aead14954c081ece03b7a5b425f81","versionType":"git"},{"lessThan":"5a85c21f812e02cb00ca07007d88acdd42d08c46","status":"affected","version":"832f6a18fc2aead14954c081ece03b7a5b425f81","versionType":"git"},{"lessThan":"ac4e317a95a1092b5da5b9918b7118759342641c","status":"affected","version":"832f6a18fc2aead14954c081ece03b7a5b425f81","versionType":"git"}]},{"defaultStatus":"affected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"status":"affected","version":"3.0"},{"lessThan":"3.0","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.4.*","status":"unaffected","version":"5.4.295","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.239","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.186","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.142","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.94","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.34","versionType":"semver"},{"lessThanOrEqual":"6.15.*","status":"unaffected","version":"6.15.3","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"6.16","versionType":"original_commit_for_fix"}]}],"cveId":"CVE-2025-38157","cwes":[],"description":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: ath9k_htc: Abort software beacon handling if disabled\n\nA malicious USB device can send a WMI_SWBA_EVENTID event from an\nath9k_htc-managed device before beaconing has been enabled. This causes\na device-by-zero error in the driver, leading to either a crash or an\nout of bounds read.\n\nPrevent this by aborting the handling in ath9k_htc_swba() if beacons are\nnot enabled.","epss":{"date":"2026-11-05","percentile":0.08652,"score":0.00189},"exploits":[],"kev":null,"metrics":[],"modifiedAt":1793911938094,"publishedAt":1751531759734,"references":[{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/e5ce9df1d68094d37360dbd9b09289d42fa21e54"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/0281c19074976ec48f0078d50530b406ddae75bc"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/7ee3fb6258da8c890a51b514f60d7570dc703605"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/40471b23147c86ea3ed97faee79937c618250bd0"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/5482ef9875eaa43f0435e14570e1193823de857e"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/ee5ee646385f5846dcbc881389f3c44a197c402a"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/5a85c21f812e02cb00ca07007d88acdd42d08c46"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/ac4e317a95a1092b5da5b9918b7118759342641c"},{"source":"ADP: CVE","tags":[],"url":"https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html"},{"source":"ADP: CVE","tags":[],"url":"https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html"}],"remediation":[],"revision":"cf109ea0e4df4d9b61cf3655834ab010a7649c4374e9d0af675e89d29fc72fb0","sources":[{"modifiedAt":1793911938094,"name":"CNA: Linux","retrievedAt":1793913604112,"url":"https://www.cve.org/CVERecord?id=CVE-2025-38157"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793913638005,"url":"https://api.first.org/data/v1/epss?cve=CVE-2025-38157"}],"ssvc":{"assessedAt":1793911839376,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"wifi: ath9k_htc: Abort software beacon handling if disabled","updatedAt":1793913638005}