CVE-2025-38157

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> wifi: ath9k_htc: Abort software beacon handling if disabled<br /> <br /> A malicious USB device can send a WMI_SWBA_EVENTID event from an<br /> ath9k_htc-managed device before beaconing has been enabled. This causes<br /> a device-by-zero error in the driver, leading to either a crash or an<br /> out of bounds read.<br /> <br /> Prevent this by aborting the handling in ath9k_htc_swba() if beacons are<br /> not enabled.