7.8

CVE-2025-38656: linux Use After Free

CVSS: 7.8v3.1HighModified
AliasesUBUNTU-CVE-2025-38656CGA-25fx-6f43-75x7CGA-2pw2-m3ww-3j6m
Published 22-08-2025Last modified 21-10-2026
Open JSON

Vulnerability summary

CVE-2025-38656 is a high (CVSS 7.8) Use After Free vulnerability in linux. EPSS estimates a 0.16% chance of exploitation in the next 30 days, higher than 5.1% of scored vulnerabilities.

Overall risk
31/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.8/10
010
High · v3.1 (CVE.org)
EPSS score
0.16%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 19 · Related 18
MGASA-2025-0234MGASA-2025-0235OPENSUSE-SU-2025:20081-1SUSE-SU-2025:03272-1SUSE-SU-2025:03290-1SUSE-SU-2025:03301-1

Timeline

  1. 22-08-2025
    PublishedVulnerability first disclosed.
  2. 21-10-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: Fix error code in iwl_op_mode_dvm_start() Preserve the error code if iwl_setup_deferred_work() fails. The current code returns ERR_PTR(0) (which is NULL) on this path. I believe the missing error code potentially leads to a use after free involving debugfs.

CVSS metrics

4 scores · 4 sources · 1 version

EPSS trend

Probability

0.16%

Chance of exploitation in the next 30 days

Percentile

5%

Versus all other CVEs

30-day change

0.00 pp

From 0.16% on 21-09-2026

21-09-202621-10-2026
EPSS score
0.16%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Ubuntu83 products
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
  • linux-aws-5.13All versions (No fix recorded)
  • linux-aws-5.19All versions (No fix recorded)
Chainguard5 products
  • linux-aws-6.12< 6.12.77-r2 | < 6.12.72-r1 | < 6.12.71-r0 | < 6.12.62-r2 | < 6.12.68-r1 | < 6.12.74-r0 | < 6.12.72-r0 | < 6.12.62-r0 | < 6.12.74-r1 | < 6.12.65-r0 | < 6.12.60-r4 | < 6.12.70-r0 | < 6.12.65-r1 | < 6.12.77-r0 | < 6.12.63-r0 | < 6.12.78-r0 | < 6.12.66-r0 | < 6.12.67-r0 | < 6.12.69-r0 | < 6.12.62-r1 | < 6.12.77-r1 | < 6.12.65-r2 | < 6.12.76-r0 | < 6.12.68-r0 | < 6.12.80-r0
  • linux-azure-6.12< 6.12.62-r0 | < 6.12.65-r2 | < 6.12.67-r0 | < 6.12.60-r4 | < 6.12.62-r2 | < 6.12.71-r0 | < 6.12.65-r4 | < 6.12.66-r0 | < 6.12.74-r1 | < 6.12.63-r0 | < 6.12.77-r2 | < 6.12.60-r3 | < 6.12.72-r0 | < 6.12.77-r1 | < 6.12.74-r0 | < 6.12.76-r0 | < 6.12.65-r3 | < 6.12.77-r0 | < 6.12.69-r0 | < 6.12.65-r1 | < 6.12.62-r1 | < 6.12.80-r0 | < 6.12.68-r0 | < 6.12.78-r0 | < 6.12.70-r0
  • linux-gcp-6.12< 6.12.66-r0 | < 6.12.60-r3 | < 6.12.80-r0 | < 6.12.71-r0 | < 6.12.65-r2 | < 6.12.69-r0 | < 6.12.77-r0 | < 6.12.74-r0 | < 6.12.65-r0 | < 6.12.72-r0 | < 6.12.70-r0 | < 6.12.78-r0 | < 6.12.68-r0 | < 6.12.65-r1 | < 6.12.63-r0 | < 6.12.77-r2 | < 6.12.60-r4 | < 6.12.62-r2 | < 6.12.68-r1 | < 6.12.76-r0 | < 6.12.62-r1 | < 6.12.62-r0 | < 6.12.67-r0 | < 6.12.77-r1 | < 6.12.74-r1
  • linux-qemu-6.12< 6.12.65-r1 | < 6.12.77-r0 | < 6.12.67-r0 | < 6.12.80-r0 | < 6.12.68-r0 | < 6.12.78-r0 | < 6.12.70-r0 | < 6.12.72-r0 | < 6.12.74-r0 | < 6.12.65-r2 | < 6.12.74-r1 | < 6.12.69-r0 | < 6.12.76-r0 | < 6.12.77-r1 | < 6.12.71-r0 | < 6.12.77-r2 | < 6.12.66-r0
  • linux-vmware-6.12< 6.12.66-r0 | < 6.12.67-r0 | < 6.12.65-r1 | < 6.12.71-r0 | < 6.12.68-r1 | < 6.12.68-r0 | < 6.12.74-r0 | < 6.12.74-r1 | < 6.12.78-r0 | < 6.12.76-r0 | < 6.12.65-r2 | < 6.12.77-r0 | < 6.12.72-r0 | < 6.12.77-r1 | < 6.12.80-r0 | < 6.12.69-r0 | < 6.12.70-r0 | < 6.12.77-r2
Linux2 products
  • linux≥ ca980f1911a7144d451d1c31298ab8507c6bd88f, < 5c432da1ee191e9f7830dd516456706063d7bec3 | ≥ 7dd6350307af6521b6240b295c93b7eec4daebe6, < f95598a133a905fd937354ad902773d05593b8b9 | ≥ c0e43c3f6c0a79381b468574c241065998412b7c, < 991e2066f6009d3cb898413058c62dbcc92bd6d2 | ≥ 70a1b527eaea9430b1bd87de59f3b9f6bd225701, < 1d068272c21d886d06526454b68368100ba0a720 | ≥ 90a0d9f339960448a3acc1437a46730f975efd6a, < cf80c02a9fdb6c5bc8508beb6a0f6a1294fc32f6 | c80832d445653baba5ac80cd2c2637c437ac881b | b398120fbe0acfef60b16f6a0f69902d385d7728 | 2e9f85ee3b46453a2f250a57d3a9f10c70c71202 | 6663c52608d8d8727bf1911e6d9218069ba1c85e | ≥ 5.4.297, < 5.5 | ≥ 5.10.241, < 5.11 | ≥ 5.15.190, < 5.16 | ≥ 6.1.148, < 6.2 | ≥ 6.6.102, < 6.6.160 | ≥ 6.12.42, < 6.12.114
  • linux_kernel≥ 5.4.297, < 5.5 | ≥ 5.10.241, < 5.11 | ≥ 5.15.190, < 5.16 | ≥ 6.1.148, < 6.2 | ≥ 6.6.102, < 6.7 | ≥ 6.12.42, < 6.13

3 vendors · 90 products

References

11 links
Show all 11 references