CVE-2025-38601

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

wifi: ath11k: clear initialized flag for deinit-ed srng lists

In a number of cases we see kernel panics on resume due

to ath11k kernel page fault, which happens under the

following circumstances:

1) First ath11k_hal_dump_srng_stats() call

Last interrupt received for each group:

ath11k_pci 0000:01:00.0: group_id 0 22511ms before

ath11k_pci 0000:01:00.0: group_id 1 14440788ms before

[..]

ath11k_pci 0000:01:00.0: failed to receive control response completion, polling..

ath11k_pci 0000:01:00.0: Service connect timeout

ath11k_pci 0000:01:00.0: failed to connect to HTT: -110

ath11k_pci 0000:01:00.0: failed to start core: -110

ath11k_pci 0000:01:00.0: firmware crashed: MHI_CB_EE_RDDM

ath11k_pci 0000:01:00.0: already resetting count 2

ath11k_pci 0000:01:00.0: failed to wait wlan mode request (mode 4): -110

ath11k_pci 0000:01:00.0: qmi failed to send wlan mode off: -110

ath11k_pci 0000:01:00.0: failed to reconf

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References