{"id":"CVE-2025-38602","title":"iwlwifi: Add missing check for alloc_ordered_workqueue","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\niwlwifi: Add missing check for alloc_ordered_workqueue\n\nAdd check for the return value of alloc_ordered_workqueue since it may\nreturn NULL pointer.","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= b481de9ca074528fe8c429604e2777db8b89806a < c80832d445653baba5ac80cd2c2637c437ac881b","Linux >= b481de9ca074528fe8c429604e2777db8b89806a < b398120fbe0acfef60b16f6a0f69902d385d7728","Linux >= b481de9ca074528fe8c429604e2777db8b89806a < 2e9f85ee3b46453a2f250a57d3a9f10c70c71202","Linux >= b481de9ca074528fe8c429604e2777db8b89806a < 6663c52608d8d8727bf1911e6d9218069ba1c85e","Linux >= b481de9ca074528fe8c429604e2777db8b89806a < ca980f1911a7144d451d1c31298ab8507c6bd88f","Linux >= b481de9ca074528fe8c429604e2777db8b89806a < 7dd6350307af6521b6240b295c93b7eec4daebe6","Linux >= b481de9ca074528fe8c429604e2777db8b89806a < c0e43c3f6c0a79381b468574c241065998412b7c","Linux >= b481de9ca074528fe8c429604e2777db8b89806a < 70a1b527eaea9430b1bd87de59f3b9f6bd225701","Linux >= b481de9ca074528fe8c429604e2777db8b89806a < 90a0d9f339960448a3acc1437a46730f975efd6a","Linux 2.6.24"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-05T21:04:43.783444Z"},"published":"2025-08-19","updated":"2026-11-05","sourceUpdated":"2026-11-05T21:12:48.378Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2025-38602","references":[{"url":"https://git.kernel.org/stable/c/c80832d445653baba5ac80cd2c2637c437ac881b"},{"url":"https://git.kernel.org/stable/c/b398120fbe0acfef60b16f6a0f69902d385d7728"},{"url":"https://git.kernel.org/stable/c/2e9f85ee3b46453a2f250a57d3a9f10c70c71202"},{"url":"https://git.kernel.org/stable/c/6663c52608d8d8727bf1911e6d9218069ba1c85e"},{"url":"https://git.kernel.org/stable/c/ca980f1911a7144d451d1c31298ab8507c6bd88f"},{"url":"https://git.kernel.org/stable/c/7dd6350307af6521b6240b295c93b7eec4daebe6"},{"url":"https://git.kernel.org/stable/c/c0e43c3f6c0a79381b468574c241065998412b7c"},{"url":"https://git.kernel.org/stable/c/70a1b527eaea9430b1bd87de59f3b9f6bd225701"},{"url":"https://git.kernel.org/stable/c/90a0d9f339960448a3acc1437a46730f975efd6a"}],"tags":["cve.org"],"epss":0.00169,"epssPercentile":0.06307,"ingestedAt":"2026-11-05T22:38:31.998Z","slug":"CVE-2025-38602","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\niwlwifi: Add missing check for alloc_ordered_workqueue\n\nAdd check for the return value of alloc_ordered_workqueue since it may\nreturn NULL pointer.\n\n## Affected\n\n- `Linux >= b481de9ca074528fe8c429604e2777db8b89806a < c80832d445653baba5ac80cd2c2637c437ac881b`\n- `Linux >= b481de9ca074528fe8c429604e2777db8b89806a < b398120fbe0acfef60b16f6a0f69902d385d7728`\n- `Linux >= b481de9ca074528fe8c429604e2777db8b89806a < 2e9f85ee3b46453a2f250a57d3a9f10c70c71202`\n- `Linux >= b481de9ca074528fe8c429604e2777db8b89806a < 6663c52608d8d8727bf1911e6d9218069ba1c85e`\n- `Linux >= b481de9ca074528fe8c429604e2777db8b89806a < ca980f1911a7144d451d1c31298ab8507c6bd88f`\n- `Linux >= b481de9ca074528fe8c429604e2777db8b89806a < 7dd6350307af6521b6240b295c93b7eec4daebe6`\n- `Linux >= b481de9ca074528fe8c429604e2777db8b89806a < c0e43c3f6c0a79381b468574c241065998412b7c`\n- `Linux >= b481de9ca074528fe8c429604e2777db8b89806a < 70a1b527eaea9430b1bd87de59f3b9f6bd225701`\n- `Linux >= b481de9ca074528fe8c429604e2777db8b89806a < 90a0d9f339960448a3acc1437a46730f975efd6a`\n- `Linux 2.6.24`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}