Null Pointer Dereference Vulnerability in Linux Kernel's MT76 Wireless Driver

CVE-2025-38156

What is CVE-2025-38156?

A vulnerability exists within the MT76 wireless driver of the Linux kernel that can lead to a null pointer dereference. This issue arises in the mt7996_mmio_wed_init() function which fails to check if devm_ioremap() returns NULL upon encountering an error. As a result, when this unchecked error condition occurs, it leads to potential instability or crashes within the system. It is crucial to apply the necessary patches to avoid exploitation of this flaw.

References