Security tracker / CVE-2025-38159

CVE-2025-38159

wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds

References

• Debian security tracker
• cve.org

Notes

 carnil> Introduced in 4136214f7c46 ("rtw88: add BT co-existence support"). Vulnerable
 carnil> versions: 5.4.

Bugs

Status

Branch	Status
upstream	released (6.16-rc1) [4c2c372de2e108319236203cce6de44d70ae15cd]
6.18-upstream-stable	N/A "Fixed before branching point"
6.17-upstream-stable	N/A "Fixed before branching point"
6.15-upstream-stable	released (6.15.3) [9febcc8bded8be0d7efd8237fcef599b6d93b788]
6.12-upstream-stable	released (6.12.34) [c13255389499275bc5489a0b5b7940ccea3aef04]
6.6-upstream-stable	released (6.6.94) [74e18211c2c89ab66c9546baa7408288db61aa0d]
6.1-upstream-stable	released (6.1.142) [68a1037f0bac4de9a585aa9c879ef886109f3647]
5.10-upstream-stable	needed
sid	released (6.12.35-1)
6.12-trixie-security	N/A "Fixed before branching point"
6.1-bookworm-security	released (6.1.147-1)
5.10-bullseye-security	needed