---
id: CVE-2025-38317
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  wifi: ath12k: Fix buffer overflow in debugfs

  If the user tries to write more than 32 bytes then it results in memory
  corruption
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  wifi: ath12k: Fix buffer overflow in debugfs

  If the user tries to write more than 32 bytes then it results in memory
  corruption.  Fortunately, this is debugfs so it's …
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-787
vendor: linux
product: linux_kernel
affected:
  - 'linux_kernel >= 6.11, < 6.12.34'
  - 'linux_kernel >= 6.13, < 6.15.3'
patched:
  - linux_kernel 6.15.3
published: '2025-07-10'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T22:18:38.550'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-38317'
references:
  - url: 'https://git.kernel.org/stable/c/0c57aa8ef94cffc5c2d68230e19329a03e71a94f'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/8c4a200d03574bfcbf54fdb7ba5968b58ad2e0b3'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/8c7a5031a6b0d42e640fbd2d5d05f61f74e32dce'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
  - cve.org
epss: 0.00204
epssPercentile: 0.10278
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-10-15T21:49:33.642158Z'
ingestedAt: '2026-10-15T22:48:25.503Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

wifi: ath12k: Fix buffer overflow in debugfs

If the user tries to write more than 32 bytes then it results in memory
corruption.  Fortunately, this is debugfs so it's limited to root users.

## Affected

- `linux_kernel >= 6.11, < 6.12.34`
- `linux_kernel >= 6.13, < 6.15.3`

## Remediation

Upgrade past the affected range:

- `linux_kernel 6.15.3`