CVE-2025-39991
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
15/10/2025
Last modified:
16/10/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
wifi: ath11k: fix NULL dereference in ath11k_qmi_m3_load()<br />
<br />
If ab->fw.m3_data points to data, then fw pointer remains null.<br />
Further, if m3_mem is not allocated, then fw is dereferenced to be<br />
passed to ath11k_err function.<br />
<br />
Replace fw->size by m3_len.<br />
<br />
Found by Linux Verification Center (linuxtesting.org) with SVACE.