{"id":"CVE-2025-38317","title":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: ath12k: Fix buffer overflow in debugfs\n\nIf the user tries to write more than 32 bytes then it results in memory\ncorruption","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: ath12k: Fix buffer overflow in debugfs\n\nIf the user tries to write more than 32 bytes then it results in memory\ncorruption.  Fortunately, this is debugfs so it's …","severity":"high","cvss":7.8,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-787"],"vendor":"linux","product":"linux_kernel","affected":["linux_kernel >= 6.11, < 6.12.34","linux_kernel >= 6.13, < 6.15.3"],"patched":["linux_kernel 6.15.3"],"published":"2025-07-10","updated":"2026-10-15","sourceUpdated":"2026-10-15T22:18:38.550","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-38317","references":[{"url":"https://git.kernel.org/stable/c/0c57aa8ef94cffc5c2d68230e19329a03e71a94f","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/8c4a200d03574bfcbf54fdb7ba5968b58ad2e0b3","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/8c7a5031a6b0d42e640fbd2d5d05f61f74e32dce","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"}],"tags":["nvd","cve.org"],"epss":0.00204,"epssPercentile":0.10278,"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-10-15T21:49:33.642158Z"},"ingestedAt":"2026-10-15T22:48:25.503Z","slug":"CVE-2025-38317","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nwifi: ath12k: Fix buffer overflow in debugfs\n\nIf the user tries to write more than 32 bytes then it results in memory\ncorruption.  Fortunately, this is debugfs so it's limited to root users.\n\n## Affected\n\n- `linux_kernel >= 6.11, < 6.12.34`\n- `linux_kernel >= 6.13, < 6.15.3`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `linux_kernel 6.15.3`","depth":"twilight","depthScore":43,"depthScoreParts":{"impact":42.9,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}