Null Pointer Dereference in Linux Kernel Affecting Wireless Connectivity

CVE-2025-38450

What is CVE-2025-38450?

A vulnerability in the Linux kernel's wireless driver (mt76) can lead to a null pointer dereference, causing a kernel panic when the AP mode is utilized. This issue arises in the function mt7925_sta_set_decap_offload() when a station is not fully initialized prior to executing the function. The panic results from attempts to access resources from a NULL pointer, specifically msta->vif, which is not valid at the time. Implementing an early return condition ensures that the function only processes when the station's state is properly set up, thereby enhancing stability and reliability in wireless communication.

References