Kernel Crash Vulnerability in Linux Package: ath12k WCN7850 Definition Issue
Summary
DEBIAN-CVE-2025-38414: In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix GCC_GCC_PCIE_HOT_RST definition for WCN7850 GCC_GCC_PCIE_HOT_RST is wrongly defined for WCN7850, causing kernel crash on some specific... Affects linux versions < 6.12.35-1. Fixed in 6.12.35-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Linux operating system, managing system resources and facilitating communication between hardware and software. It is widely used in various distributions, including Debian. The kernel's functionality is critical for system stability and performance. This vulnerability affects the ath12k driver for WCN7850 hardware, which is responsible for wireless communication, particularly in specific platforms that utilize this chipset.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the ath12k driver related to the definition of the GCC_GCC_PCIE_HOT_RST register for the WCN7850 chipset. This incorrect definition can lead to kernel crashes on certain platforms. The issue arises from the divergent nature of the register definitions for the WCN7850 and QCN9274 chipsets. The vulnerability was introduced due to a misconfiguration that did not account for the specific requirements of the WCN7850 hardware, potentially causing system instability and crashes during operation.
How To Fix
Minimum fixed version
6.12.35-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. The best course of action is to apply the patch as soon as it is available.
Conclusion
The vulnerability in the Linux kernel related to the ath12k driver for WCN7850 hardware poses a significant risk of kernel crashes on affected platforms. Users are encouraged to update to the patched version 6.12.35-1 to ensure system stability and security. Monitoring tools like Vulert can assist in identifying vulnerabilities in your software.
See every vulnerability recorded for linux →
FAQ
The vulnerability can cause kernel crashes on platforms using the WCN7850 chipset, leading to system instability.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without requiring any signup.
While there are no specific workarounds, it is advisable to monitor the situation and apply the patch as soon as possible to mitigate risks.
Yes, this vulnerability specifically affects the WCN7850 chipset and does not impact other hardware like the IPQ5332.
Detailed information can be found in the Debian CVE database or by visiting the Vulert website for real-time monitoring of vulnerabilities.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
