Cloudanix VulnDB

CVE-2025-38096

Medium · 5.5

CVSS

5.5

EPSS

0.2%

Published

Jul 3, 2025

CISA due date

—

Cloudanix analysis

Monitor only SSVC: Track

A Linux WiFi driver was fixed so it stops showing confusing error messages when the wireless hardware restarts after a problem.

Exploitation
Other
Attacker needs
None
Complexity
Theoretical
Impact
Other
Component
OS kernel
Class
Other
Remediation
Patch
Effort
Low
Patch risk
None

What it actually does

The kernel driver emits an unnecessary warning from iwl_trans_reclaim when invoked during firmware restart after a FW error instead of returning silently.

Why it matters to the business

Produces spurious warning logs that increase noise in monitoring and may mask genuine problems on systems using affected Intel WiFi hardware.

How an attack unfolds

No attacker exploitation is possible; the issue is strictly a change in logging behavior during internal firmware recovery.

How to fix it

Update rancher-loglevel to 0.1.6-r5 or apply Linux kernel commit 0446d34a853d9576e2a7628c803d2abd2f8cf3a8 and later stable releases containing the silent-return change.

How to confirm the fix worked

Confirm the updated source contains the conditional early return without warning in iwl_trans_reclaim when the firmware is not alive.

How to detect it

Search kernel logs for iwlwifi reclaim warnings that occur while firmware is restarting; reduced frequency after patching confirms the change took effect.

What your security team should do

  • Apply the listed package or kernel updates promptly to eliminate log noise
  • Review WiFi-related log volume after patching to verify reduction in spurious warnings

The record

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: don't warn when if there is a FW error iwl_trans_reclaim is warning if it is called when the FW is not alive. But if it is called when there is a pending restart, i.e. after a FW error, there is no need to warn, instead - return silently.

Affected packages

Ecosystem Package Introduced Fixed
Debian:11 linux 0 No fix
Debian:12 linux 0 No fix
Debian:13 linux 0 6.12.32-1
Linux Kernel 0 6.12.31
Linux Kernel 4.5.0 6.12.31
openSUSE:Leap 16.0 dtb-aarch64 0 6.12.0-160000.6.1
openSUSE:Leap 16.0 kernel-64kb 0 6.12.0-160000.6.1
openSUSE:Leap 16.0 kernel-default 0 6.12.0-160000.6.1
openSUSE:Leap 16.0 kernel-default-base 0 6.12.0-160000.6.1.160000.2.4
openSUSE:Leap 16.0 kernel-docs 0 6.12.0-160000.6.1
openSUSE:Leap 16.0 kernel-kvmsmall 0 6.12.0-160000.6.1
openSUSE:Leap 16.0 kernel-obs-build 0 6.12.0-160000.6.1
openSUSE:Leap 16.0 kernel-obs-qa 0 6.12.0-160000.6.1
openSUSE:Leap 16.0 kernel-rt 0 6.12.0-160000.6.1
openSUSE:Leap 16.0 kernel-source 0 6.12.0-160000.6.1
openSUSE:Leap 16.0 kernel-syms 0 6.12.0-160000.6.1
openSUSE:Leap 16.0 kernel-zfcpdump 0 6.12.0-160000.6.1

Related vulnerabilities