CVE-2025-38290

CVE-2025-38290 is described in the Azure Linux 3.0 advisory as a Linux kernel vulnerability within the ath12k driver that can cause a kernel panic during WLAN recovery. The issue arises in the arvifs list handling: during WLAN halt, only the arvifs list head is reinitialized, which leaves the nod...

CVE-2025-38290 wifi: ath12k: fix node corruption in ar->arvifs list

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix node corruption in ar-arvifs list In current WLAN recovery code flow, ath12kcorehalt only reinitializes the "arvifs" list head. This will cause the list node immediately following the list head to become an...