Exploit in Realtek RTW89 Driver for Linux Kernel

CVE-2025-38647

What is CVE-2025-38647?

A vulnerability in the Realtek RTW89 driver during its initialization phase leads to a lockdep assertion failure. The rtw89_set_sar_from_acpi function triggers an assertion related to wiphy lock management when the driver starts up. This issue has been resolved by eliminating the unnecessary lock assertion, enhancing the driver's stability and performance. Users are encouraged to update to the latest kernel version to mitigate the risks associated with this vulnerability.

References