CVE-2025-39991 — NULL Pointer Dereference in Linux

CWE-476 — NULL Pointer Dereference23 documents6 sources
Severity
3.2LOWOSV
No vector
EPSS
0.0%
top 92.28%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
LinuxLinux KernelDebian Linux
Timeline
PublishedOct 15
Latest updateApr 9

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix NULL dereference in ath11k_qmi_m3_load() If ab->fw.m3_data points to data, then fw pointer remains null. Further, if m3_mem is not allocated, then fw is dereferenced to be passed to ath11k_err function. Replace fw->size by m3_len. Found by Linux Verification Center (linuxtesting.org) with SVACE.

Affected Packages5 packages

▶Linuxlinux/linux_kernel6.7.0 — 6.12.51+2
▶Debianlinux/linux_kernel< 6.12.57-1+1
▶Ubuntulinux/linux_kernel< 6.8.0-106.106
▶CVEListV5linux/linux7db88b962f06a52af5e9a32971012e8f3427cec0 — 1f52119809b76d43759fc47da1cf708690b740a1+4
▶debiandebian/linux< linux 6.16.11-1 (forky)

🔴Vulnerability Details

11
OSV
linux-raspi, linux-raspi-realtime vulnerabilities↗2026-04-01
▶
OSV
linux-azure-6.8 vulnerabilities↗2026-03-25
▶
OSV
linux-azure vulnerabilities↗2026-03-25
▶
OSV
linux-aws-6.8 vulnerabilities↗2026-03-23
▶
OSV
linux-realtime, linux-realtime-6.8 vulnerabilities↗2026-03-17
▶

📋Vendor Advisories

11
Ubuntu
Linux kernel (Azure FIPS) vulnerabilities↗2026-04-09
▶
Ubuntu
Linux kernel (Raspberry Pi) vulnerabilities↗2026-04-01
▶
Ubuntu
Linux kernel (Azure) vulnerabilities↗2026-03-25
▶
Ubuntu
Linux kernel (Azure) vulnerabilities↗2026-03-25
▶
Ubuntu
Linux kernel (AWS) vulnerabilities↗2026-03-23
▶