CVE-2025-38414 wifi: ath12k: fix GCC_GCC_PCIE_HOT_RST definition for WCN7850
A kernel crash occurs on specific platforms due to an incorrect PCIe reset register definition in the ath12k WiFi driver for WCN7850 devices.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-38414?
CVE-2025-38414 is a medium-severity vulnerability in Linux kernel, published on 25 Jul 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
wifi: ath12k: fix GCC_GCC_PCIE_HOT_RST definition for WCN7850
GCC_GCC_PCIE_HOT_RST is wrongly defined for WCN7850, causing kernel crash on some specific platforms.
Since this register is divergent for WCN7850 and QCN9274, move it to register table to allow different definitions. Then correct the register address for WCN7850 to fix this issue.
Note IPQ5332 is not affected as it is not PCIe based device.
Tested-on: WCN7850 hw2.0 PCI WLAN.HMT.1.0.c5-00481-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
Which versions are affected by CVE-2025-38414?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2025-38414?
Apply the vendor's patch.
Is CVE-2025-38414 being exploited?
There is no known exploitation of CVE-2025-38414 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as BELL-CVE-2025-38414, DEBIAN-CVE-2025-38414, GHSA-35qw-c8w7-fcg8, ROOT-OS-UBUNTU-2404-CVE-2025-38414, UBUNTU-CVE-2025-38414.