---
id: CVE-2025-38602
title: 'iwlwifi: Add missing check for alloc_ordered_workqueue'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  iwlwifi: Add missing check for alloc_ordered_workqueue

  Add check for the return value of alloc_ordered_workqueue since it may
  return NULL pointer.
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= b481de9ca074528fe8c429604e2777db8b89806a <
    c80832d445653baba5ac80cd2c2637c437ac881b
  - >-
    Linux >= b481de9ca074528fe8c429604e2777db8b89806a <
    b398120fbe0acfef60b16f6a0f69902d385d7728
  - >-
    Linux >= b481de9ca074528fe8c429604e2777db8b89806a <
    2e9f85ee3b46453a2f250a57d3a9f10c70c71202
  - >-
    Linux >= b481de9ca074528fe8c429604e2777db8b89806a <
    6663c52608d8d8727bf1911e6d9218069ba1c85e
  - >-
    Linux >= b481de9ca074528fe8c429604e2777db8b89806a <
    ca980f1911a7144d451d1c31298ab8507c6bd88f
  - >-
    Linux >= b481de9ca074528fe8c429604e2777db8b89806a <
    7dd6350307af6521b6240b295c93b7eec4daebe6
  - >-
    Linux >= b481de9ca074528fe8c429604e2777db8b89806a <
    c0e43c3f6c0a79381b468574c241065998412b7c
  - >-
    Linux >= b481de9ca074528fe8c429604e2777db8b89806a <
    70a1b527eaea9430b1bd87de59f3b9f6bd225701
  - >-
    Linux >= b481de9ca074528fe8c429604e2777db8b89806a <
    90a0d9f339960448a3acc1437a46730f975efd6a
  - Linux 2.6.24
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-05T21:04:43.783444Z'
published: '2025-08-19'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T21:12:48.378Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2025-38602'
references:
  - url: 'https://git.kernel.org/stable/c/c80832d445653baba5ac80cd2c2637c437ac881b'
  - url: 'https://git.kernel.org/stable/c/b398120fbe0acfef60b16f6a0f69902d385d7728'
  - url: 'https://git.kernel.org/stable/c/2e9f85ee3b46453a2f250a57d3a9f10c70c71202'
  - url: 'https://git.kernel.org/stable/c/6663c52608d8d8727bf1911e6d9218069ba1c85e'
  - url: 'https://git.kernel.org/stable/c/ca980f1911a7144d451d1c31298ab8507c6bd88f'
  - url: 'https://git.kernel.org/stable/c/7dd6350307af6521b6240b295c93b7eec4daebe6'
  - url: 'https://git.kernel.org/stable/c/c0e43c3f6c0a79381b468574c241065998412b7c'
  - url: 'https://git.kernel.org/stable/c/70a1b527eaea9430b1bd87de59f3b9f6bd225701'
  - url: 'https://git.kernel.org/stable/c/90a0d9f339960448a3acc1437a46730f975efd6a'
tags:
  - cve.org
epss: 0.00169
epssPercentile: 0.06307
ingestedAt: '2026-11-05T22:38:31.998Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

iwlwifi: Add missing check for alloc_ordered_workqueue

Add check for the return value of alloc_ordered_workqueue since it may
return NULL pointer.

## Affected

- `Linux >= b481de9ca074528fe8c429604e2777db8b89806a < c80832d445653baba5ac80cd2c2637c437ac881b`
- `Linux >= b481de9ca074528fe8c429604e2777db8b89806a < b398120fbe0acfef60b16f6a0f69902d385d7728`
- `Linux >= b481de9ca074528fe8c429604e2777db8b89806a < 2e9f85ee3b46453a2f250a57d3a9f10c70c71202`
- `Linux >= b481de9ca074528fe8c429604e2777db8b89806a < 6663c52608d8d8727bf1911e6d9218069ba1c85e`
- `Linux >= b481de9ca074528fe8c429604e2777db8b89806a < ca980f1911a7144d451d1c31298ab8507c6bd88f`
- `Linux >= b481de9ca074528fe8c429604e2777db8b89806a < 7dd6350307af6521b6240b295c93b7eec4daebe6`
- `Linux >= b481de9ca074528fe8c429604e2777db8b89806a < c0e43c3f6c0a79381b468574c241065998412b7c`
- `Linux >= b481de9ca074528fe8c429604e2777db8b89806a < 70a1b527eaea9430b1bd87de59f3b9f6bd225701`
- `Linux >= b481de9ca074528fe8c429604e2777db8b89806a < 90a0d9f339960448a3acc1437a46730f975efd6a`
- `Linux 2.6.24`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.