SB2025070438 - Out-of-bounds read in Linux kernel realtek rtw88 driver
Published: July 4, 2025
Security Bulletin ID
SB2025070438
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Out-of-bounds read (CVE-ID: CVE-2025-38159)
The vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to an out-of-bounds read error within the rtw_coex_tdma_timer_base() function in drivers/net/wireless/realtek/rtw88/coex.c. A local user can perform a denial of service (DoS) attack.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/1ee8ea6937d13b20f90ff35d71ccc03ba448182d
- https://git.kernel.org/stable/c/4c2c372de2e108319236203cce6de44d70ae15cd
- https://git.kernel.org/stable/c/68a1037f0bac4de9a585aa9c879ef886109f3647
- https://git.kernel.org/stable/c/74e18211c2c89ab66c9546baa7408288db61aa0d
- https://git.kernel.org/stable/c/9febcc8bded8be0d7efd8237fcef599b6d93b788
- https://git.kernel.org/stable/c/c13255389499275bc5489a0b5b7940ccea3aef04