LiveActive security incident?Get immediate response
CVE Record

CVE-2025-38541: wifi: mt76: mt7925: Fix null-ptr-deref in mt7925_thermal_init()

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: Fix null-ptr-deref in mt7925_thermal_init() devm_kasprintf() returns NULL on error. Currently, mt7925_thermal_init() does not check for this case, which results in a NULL pointer dereference. Add NULL check after devm_kasprintf() to prevent this issue.

UnknownCVSS not scoredNot KEV-listedUpdated
Discuss exposureBack to CVEs
Glexia's TakeAutomated analysisunknown

Security readout for executives and security teams

Plain-English summary

This Linux kernel issue is a reliability bug in the mt7925 Wi-Fi driver. If a memory allocation fails during thermal setup, the kernel may hit a NULL pointer dereference. The provided sources do not show active exploitation, a CVSS score, or broad business impact evidence.

Executive priority

Treat this as a routine kernel maintenance item unless affected mt7925 Wi-Fi systems are business-critical or unstable. There is not enough evidence in the bundle to justify emergency response.

Technical view

mt7925_thermal_init() in the Linux kernel mt76/mt7925 Wi-Fi driver did not check whether devm_kasprintf() returned NULL. On allocation failure, later use could cause a NULL pointer dereference. The stable fixes add the missing NULL check.

Likely exposure

Exposure appears limited to Linux systems running affected kernel builds with the mt76 mt7925 Wi-Fi driver code. The bundle identifies Linux kernel versions and stable commit references, but does not name distributions, appliances, or cloud images.

Exploitation context

The source bundle says KEV is false and provides no evidence of active exploitation. It also does not describe an exploit path, attacker prerequisites, or whether the condition is remotely triggerable.

Researcher notes

Key evidence is narrow: a NULL return from devm_kasprintf() was unchecked in mt7925_thermal_init(). Severity, CVSS, CWE, exploitability, and distribution-level affected ranges are not provided in the bundle.

Mitigation direction

  • Update to a kernel build that includes the referenced stable fix commits.
  • Check Linux distribution advisories for packaged kernel availability.
  • Prioritize affected laptops, workstations, and embedded systems using mt7925 Wi-Fi hardware.
  • If patch timing is unclear, follow vendor guidance for interim mitigations.

Validation and detection

  • Inventory Linux kernel versions across managed endpoints and embedded systems.
  • Check whether systems load or package the mt76 mt7925 driver.
  • Confirm installed kernels include one of the referenced stable fix commits.
  • Review distribution security tracker entries for CVE-2025-38541 when available.
Prepared
Confidence
medium
Sources
5

Public sources used

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.

Potential ATT&CK relevance

Conservative CVE-to-ATT&CK context

These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.

ATT&CK lookup starting points

Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.

cve · low confidence lookup

CVE-2025-38541 mapping review

Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.

Open ATT&CK lookup
Vulnerability profileCVE Program record
Severity
Unknown
CVSS
Not scored
Known Exploited
No
Published
Official CVE source material

CNA and ADP enrichment extracted from CVE v5

These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.

0CVSS vectors
3Timeline events
0ADP providers
4Source links

Vulnerability timeline

Timeline events are normalized from CVE metadata, CNA source timelines, ADP timelines, and KEV metadata when present.

  1. CVE reservedCVE Program

    The CVE ID was reserved by the assigning CNA.

  2. CVE publishedCVE Program

    The CVE record was published.

  3. CVE updatedCVE Program

    The CVE record metadata indicates this as the latest update time.

Source materials

Affected products

Products and packages named in the record

VendorProductVersion / packageStatus
LinuxLinux396e41a74a88654f23e36c46d2995752c91654a5, 396e41a74a88654f23e36c46d2995752c91654a5, 396e41a74a88654f23e36c46d2995752c91654a5unaffected
LinuxLinux6.9, 0, 6.12.39, 6.15.7, 6.16affected
Weakness

CWE details

No CWE listed

CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.