CVE-2025-38096
Medium · 5.5CVSS
5.5
EPSS
0.2%
Published
Jul 3, 2025
CISA due date
—
Cloudanix analysis
A Linux WiFi driver was fixed so it stops showing confusing error messages when the wireless hardware restarts after a problem.
- Exploitation
- Other
- Attacker needs
- None
- Complexity
- Theoretical
- Impact
- Other
- Component
- OS kernel
- Class
- Other
- Remediation
- Patch
- Effort
- Low
- Patch risk
- None
What it actually does
The kernel driver emits an unnecessary warning from iwl_trans_reclaim when invoked during firmware restart after a FW error instead of returning silently.
Why it matters to the business
Produces spurious warning logs that increase noise in monitoring and may mask genuine problems on systems using affected Intel WiFi hardware.
How an attack unfolds
No attacker exploitation is possible; the issue is strictly a change in logging behavior during internal firmware recovery.
How to fix it
Update rancher-loglevel to 0.1.6-r5 or apply Linux kernel commit 0446d34a853d9576e2a7628c803d2abd2f8cf3a8 and later stable releases containing the silent-return change.
How to confirm the fix worked
Confirm the updated source contains the conditional early return without warning in iwl_trans_reclaim when the firmware is not alive.
How to detect it
Search kernel logs for iwlwifi reclaim warnings that occur while firmware is restarting; reduced frequency after patching confirms the change took effect.
What your security team should do
- Apply the listed package or kernel updates promptly to eliminate log noise
- Review WiFi-related log volume after patching to verify reduction in spurious warnings
The record
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: don't warn when if there is a FW error iwl_trans_reclaim is warning if it is called when the FW is not alive. But if it is called when there is a pending restart, i.e. after a FW error, there is no need to warn, instead - return silently.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | linux | 0 | No fix |
| Debian:12 | linux | 0 | No fix |
| Debian:13 | linux | 0 | 6.12.32-1 |
| Linux | Kernel | 0 | 6.12.31 |
| Linux | Kernel | 4.5.0 | 6.12.31 |
| openSUSE:Leap 16.0 | dtb-aarch64 | 0 | 6.12.0-160000.6.1 |
| openSUSE:Leap 16.0 | kernel-64kb | 0 | 6.12.0-160000.6.1 |
| openSUSE:Leap 16.0 | kernel-default | 0 | 6.12.0-160000.6.1 |
| openSUSE:Leap 16.0 | kernel-default-base | 0 | 6.12.0-160000.6.1.160000.2.4 |
| openSUSE:Leap 16.0 | kernel-docs | 0 | 6.12.0-160000.6.1 |
| openSUSE:Leap 16.0 | kernel-kvmsmall | 0 | 6.12.0-160000.6.1 |
| openSUSE:Leap 16.0 | kernel-obs-build | 0 | 6.12.0-160000.6.1 |
| openSUSE:Leap 16.0 | kernel-obs-qa | 0 | 6.12.0-160000.6.1 |
| openSUSE:Leap 16.0 | kernel-rt | 0 | 6.12.0-160000.6.1 |
| openSUSE:Leap 16.0 | kernel-source | 0 | 6.12.0-160000.6.1 |
| openSUSE:Leap 16.0 | kernel-syms | 0 | 6.12.0-160000.6.1 |
| openSUSE:Leap 16.0 | kernel-zfcpdump | 0 | 6.12.0-160000.6.1 |
Related vulnerabilities
- CVE-2025-39885 In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix recursive… Also affects linux
- CVE-2025-39883 In the Linux kernel, the following vulnerability has been resolved: mm/memory-failure… Also affects linux
- CVE-2025-39876 In the Linux kernel, the following vulnerability has been resolved: net: fec: Fix… Also affects linux
- CVE-2025-39869 In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: edma… Also affects linux
- CVE-2025-39873 In the Linux kernel, the following vulnerability has been resolved: can: xilinx_can… Also affects linux
- CVE-2025-39863 In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: fix… Also affects linux
- CVE-2025-39865 In the Linux kernel, the following vulnerability has been resolved: tee: fix NULL pointer… Also affects linux
- CVE-2025-39866 In the Linux kernel, the following vulnerability has been resolved: fs: writeback: fix… Also affects linux