01 Record

CVE-2025-38604

wifi: rtl818x: Kill URBs before clearing tx status queue

HighPUBLISHEDCNA: Linux

CNA base score7.8 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

View raw JSON

02 Description

wifi: rtl818x: Kill URBs before clearing tx status queue

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.17% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 7.0% of scored records. A rank, not a probability.
NVD base score: 5.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-07-30.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-08-19 17:03Z1 YR AGO

Last updated

2026-08-05 12:03Z2 MO AGO

Reserved

2025-04-16

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.8)

CNA CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-476NULL Pointer DereferenceBase
CWE-416Use After FreeVariant

Data version

5.2

Document digest

abba92b5f30613f039fdbe6784dafe390ff68ecc4f16e06f937c4362b6ee959b

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxc1db52b9d27ee6e15a7136e67e4a21dc916cd07f to < e64732ebff9e24258e7326f07adbe2f2b990daf8, c1db52b9d27ee6e15a7136e67e4a21dc916cd07f to < 789415771422f4fb9f444044f86ecfaec55df1bd, c1db52b9d27ee6e15a7136e67e4a21dc916cd07f to < c73c773b09e313278f9b960303a2809b8440bac6, c1db52b9d27ee6e15a7136e67e4a21dc916cd07f to < 8c767727f331fb9455b0f81daad832b5925688cb, c1db52b9d27ee6e15a7136e67e4a21dc916cd07f to < 14ca6952691fa8cc91e7644512e6ff24a595283f, c1db52b9d27ee6e15a7136e67e4a21dc916cd07f to < 7858a95566f4ebf59524666683d2dcdba3fca968, c1db52b9d27ee6e15a7136e67e4a21dc916cd07f to < c51a45ad9070a6d296174fcbe5c466352836c12b, c1db52b9d27ee6e15a7136e67e4a21dc916cd07f to < 81cfe34d0630de4e23ae804dcc08fb6f861dc37d, c1db52b9d27ee6e15a7136e67e4a21dc916cd07f to < 16d8fd74dbfca0ea58645cd2fca13be10cae3cdd, 2.6.29—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/e64732ebff9e24258e7326f07adbe2f2b990daf8
git.kernel.orghttps://git.kernel.org/stable/c/789415771422f4fb9f444044f86ecfaec55df1bd
git.kernel.orghttps://git.kernel.org/stable/c/c73c773b09e313278f9b960303a2809b8440bac6
git.kernel.orghttps://git.kernel.org/stable/c/8c767727f331fb9455b0f81daad832b5925688cb
git.kernel.orghttps://git.kernel.org/stable/c/14ca6952691fa8cc91e7644512e6ff24a595283f
git.kernel.orghttps://git.kernel.org/stable/c/7858a95566f4ebf59524666683d2dcdba3fca968
git.kernel.orghttps://git.kernel.org/stable/c/c51a45ad9070a6d296174fcbe5c466352836c12b
git.kernel.orghttps://git.kernel.org/stable/c/81cfe34d0630de4e23ae804dcc08fb6f861dc37d
git.kernel.orghttps://git.kernel.org/stable/c/16d8fd74dbfca0ea58645cd2fca13be10cae3cdd
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/10/msg00008.html
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/10/msg00007.html

07 Fixed in

Debian 12

linux
Fixed in 6.1.148-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.12.43-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 6.16.3-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.