CVE-2025-38159: 
Linux Kernel vulnerability analysis and mitigation

CVE-2025-38159 is a vulnerability discovered in the Linux kernel's rtw88 WiFi driver component. The issue was identified and disclosed on July 3, 2025, affecting the buffer size handling in the WiFi driver. The vulnerability was detected using the static analysis tool Svace (CVE Mitre, NVD).

The vulnerability stems from an incorrect buffer size allocation in the rtw88 WiFi driver. Specifically, the 'para' buffer size was set to 2 instead of the required 6 bytes, while the rtwfwbtwificontrol function attempts to read 5 bytes from this buffer. The function uses multiple SETBTWIFICONTROLDATA operations that access memory locations beyond the allocated buffer size (Rapid7).

The vulnerability could lead to out-of-bounds memory reading, potentially exposing sensitive kernel memory data. Based on the CVSS score of 6.0 reported by Rapid7, this indicates a moderate severity issue with local access requirements (Rapid7).

A fix has been implemented by adjusting the 'para' buffer size from 2 to 6 bytes to accommodate the full data read requirements of the rtwfwbtwificontrol function. This patch has been merged into the Linux kernel (CVE Mitre).