CVE-2025-38414: 
Linux Kernel vulnerability analysis and mitigation

A vulnerability in the Linux kernel has been identified and assigned CVE-2025-38414. The issue relates to an incorrect definition of GCC_GCC_PCIE_HOT_RST for WCN7850 hardware, which can cause kernel crashes on specific platforms. The vulnerability was disclosed on July 25, 2025 (NVD).

The vulnerability stems from a register definition issue where GCC_GCC_PCIE_HOT_RST is incorrectly defined for WCN7850 hardware. Since this register differs between WCN7850 and QCN9274, it needs to be moved to a register table to allow for different definitions. The IPQ5332 device is not affected as it is not PCIe based. The issue was confirmed on WCN7850 hw2.0 PCI WLAN.HMT.1.0.c5-00481-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 (Debian).

When exploited, this vulnerability can cause kernel crashes on affected platforms using the WCN7850 hardware (NVD).

The issue has been resolved in various Linux kernel versions. For Debian systems, fixes are available in version 6.12.38-1 for trixie and sid distributions. The vulnerability has also been addressed in version 6.1.140-1 for bookworm (security) and version 5.10.237-1 for bullseye (security) (Debian).