{"affected":[{"defaultStatus":"unaffected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"lessThan":"0140d3d37f0f1759d1fdedd854c7875a86e15f8d","status":"affected","version":"e4a668c59080f862af3ecc28b359533027cbe434","versionType":"git"},{"lessThan":"8a3734a6f4c05fd24605148f21fb2066690d61b3","status":"affected","version":"e4a668c59080f862af3ecc28b359533027cbe434","versionType":"git"},{"lessThan":"527fad1ae32ffa2d4853a1425fe1c8dbb8c9744c","status":"affected","version":"e4a668c59080f862af3ecc28b359533027cbe434","versionType":"git"},{"lessThan":"bfeede26e97ce4a15a0b961118de4a0e28c9907a","status":"affected","version":"e4a668c59080f862af3ecc28b359533027cbe434","versionType":"git"},{"lessThan":"4e9ab5c48ad5153cc908dd29abad0cd2a92951e4","status":"affected","version":"e4a668c59080f862af3ecc28b359533027cbe434","versionType":"git"},{"lessThan":"301268dbaac8e9013719e162a000202eac8054be","status":"affected","version":"e4a668c59080f862af3ecc28b359533027cbe434","versionType":"git"},{"lessThan":"11ef72b3312752c2ff92f3c1e64912be3228ed36","status":"affected","version":"e4a668c59080f862af3ecc28b359533027cbe434","versionType":"git"},{"lessThan":"15d25307692312cec4b57052da73387f91a2e870","status":"affected","version":"e4a668c59080f862af3ecc28b359533027cbe434","versionType":"git"}]},{"defaultStatus":"affected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"status":"affected","version":"2.6.38"},{"lessThan":"2.6.38","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.4.*","status":"unaffected","version":"5.4.295","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.239","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.186","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.142","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.95","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.35","versionType":"semver"},{"lessThanOrEqual":"6.15.*","status":"unaffected","version":"6.15.4","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"6.16","versionType":"original_commit_for_fix"}]}],"cveId":"CVE-2025-38420","cwes":[],"description":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: carl9170: do not ping device which has failed to load firmware\n\nSyzkaller reports [1, 2] crashes caused by an attempts to ping\nthe device which has failed to load firmware. Since such a device\ndoesn't pass 'ieee80211_register_hw()', an internal workqueue\nmanaged by 'ieee80211_queue_work()' is not yet created and an\nattempt to queue work on it causes null-ptr-deref.\n\n[1] https://syzkaller.appspot.com/bug?extid=9a4aec827829942045ff\n[2] https://syzkaller.appspot.com/bug?extid=0d8afba53e8fb2633217","epss":{"date":"2026-11-05","percentile":0.11024,"score":0.00208},"exploits":[],"kev":null,"metrics":[],"modifiedAt":1793912557299,"publishedAt":1753453001479,"references":[{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/0140d3d37f0f1759d1fdedd854c7875a86e15f8d"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/8a3734a6f4c05fd24605148f21fb2066690d61b3"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/527fad1ae32ffa2d4853a1425fe1c8dbb8c9744c"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/bfeede26e97ce4a15a0b961118de4a0e28c9907a"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/4e9ab5c48ad5153cc908dd29abad0cd2a92951e4"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/301268dbaac8e9013719e162a000202eac8054be"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/11ef72b3312752c2ff92f3c1e64912be3228ed36"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/15d25307692312cec4b57052da73387f91a2e870"},{"source":"ADP: CVE","tags":[],"url":"https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html"},{"source":"ADP: CVE","tags":[],"url":"https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html"}],"remediation":[],"revision":"17150248ac1dbd346a50ce61acd02f0ed17e4babbeadbf2391a099961f06207c","sources":[{"modifiedAt":1793912557299,"name":"CNA: Linux","retrievedAt":1793913691457,"url":"https://www.cve.org/CVERecord?id=CVE-2025-38420"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793913704247,"url":"https://api.first.org/data/v1/epss?cve=CVE-2025-38420"}],"ssvc":{"assessedAt":1793912181693,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"wifi: carl9170: do not ping device which has failed to load firmware","updatedAt":1793913704247}