{"id":"DEBIAN-CVE-2025-38643","details":"In the Linux kernel, the following vulnerability has been resolved:  wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac()  Callers of wdev_chandef() must hold the wiphy mutex.  But the worker cfg80211_propagate_cac_done_wk() never takes the lock. Which triggers the warning below with the mesh_peer_connected_dfs test from hostapd and not (yet) released mac80211 code changes:  WARNING: CPU: 0 PID: 495 at net/wireless/chan.c:1552 wdev_chandef+0x60/0x165 Modules linked in: CPU: 0 UID: 0 PID: 495 Comm: kworker/u4:2 Not tainted 6.14.0-rc5-wt-g03960e6f9d47 #33 13c287eeabfe1efea01c0bcc863723ab082e17cf Workqueue: cfg80211 cfg80211_propagate_cac_done_wk Stack:  00000000 00000001 ffffff00 6093267c  00000000 6002ec30 6d577c50 60037608  00000000 67e8d108 6063717b 00000000 Call Trace:  [\u003c6002ec30\u003e] ? _printk+0x0/0x98  [\u003c6003c2b3\u003e] show_stack+0x10e/0x11a  [\u003c6002ec30\u003e] ? _printk+0x0/0x98  [\u003c60037608\u003e] dump_stack_lvl+0x71/0xb8  [\u003c6063717b\u003e] ? wdev_chandef+0x60/0x165  [\u003c6003766d\u003e] dump_stack+0x1e/0x20  [\u003c6005d1b7\u003e] __warn+0x101/0x20f  [\u003c6005d3a8\u003e] warn_slowpath_fmt+0xe3/0x15d  [\u003c600b0c5c\u003e] ? mark_lock.part.0+0x0/0x4ec  [\u003c60751191\u003e] ? __this_cpu_preempt_check+0x0/0x16  [\u003c600b11a2\u003e] ? mark_held_locks+0x5a/0x6e  [\u003c6005d2c5\u003e] ? warn_slowpath_fmt+0x0/0x15d  [\u003c60052e53\u003e] ? unblock_signals+0x3a/0xe7  [\u003c60052f2d\u003e] ? um_set_signals+0x2d/0x43  [\u003c60751191\u003e] ? __this_cpu_preempt_check+0x0/0x16  [\u003c607508b2\u003e] ? lock_is_held_type+0x207/0x21f  [\u003c6063717b\u003e] wdev_chandef+0x60/0x165  [\u003c605f89b4\u003e] regulatory_propagate_dfs_state+0x247/0x43f  [\u003c60052f00\u003e] ? um_set_signals+0x0/0x43  [\u003c605e6bfd\u003e] cfg80211_propagate_cac_done_wk+0x3a/0x4a  [\u003c6007e460\u003e] process_scheduled_works+0x3bc/0x60e  [\u003c6007d0ec\u003e] ? move_linked_works+0x4d/0x81  [\u003c6007d120\u003e] ? assign_work+0x0/0xaa  [\u003c6007f81f\u003e] worker_thread+0x220/0x2dc  [\u003c600786ef\u003e] ? set_pf_worker+0x0/0x57  [\u003c60087c96\u003e] ? to_kthread+0x0/0x43  [\u003c6008ab3c\u003e] kthread+0x2d3/0x2e2  [\u003c6007f5ff\u003e] ? worker_thread+0x0/0x2dc  [\u003c6006c05b\u003e] ? calculate_sigpending+0x0/0x56  [\u003c6003b37d\u003e] new_thread_handler+0x4a/0x64 irq event stamp: 614611 hardirqs last  enabled at (614621): [\u003c00000000600bc96b\u003e] __up_console_sem+0x82/0xaf hardirqs last disabled at (614630): [\u003c00000000600bc92c\u003e] __up_console_sem+0x43/0xaf softirqs last  enabled at (614268): [\u003c00000000606c55c6\u003e] __ieee80211_wake_queue+0x933/0x985 softirqs last disabled at (614266): [\u003c00000000606c52d6\u003e] __ieee80211_wake_queue+0x643/0x985","modified":"2026-09-01T16:06:15.043904034Z","published":"2025-08-22T16:15:38.417Z","upstream":["CVE-2025-38643"],"references":[{"type":"ADVISORY","url":"https://security-tracker.debian.org/tracker/CVE-2025-38643"}],"affected":[{"package":{"name":"linux","ecosystem":"Debian:12","purl":"pkg:deb/debian/linux?arch=source&distro=bookworm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.164-1"}]}],"versions":["6.1.106-1","6.1.106-2","6.1.106-3","6.1.112-1","6.1.115-1","6.1.119-1","6.1.123-1","6.1.124-1","6.1.128-1","6.1.129-1","6.1.133-1","6.1.135-1","6.1.137-1","6.1.139-1","6.1.140-1","6.1.147-1","6.1.148-1","6.1.153-1","6.1.158-1","6.1.159-1","6.1.162-1","6.1.27-1","6.1.37-1","6.1.38-1","6.1.38-2","6.1.38-2~bpo11+1","6.1.38-3","6.1.38-4","6.1.38-4~bpo11+1","6.1.52-1","6.1.55-1","6.1.55-1~bpo11+1","6.1.64-1","6.1.66-1","6.1.67-1","6.1.69-1","6.1.69-1~bpo11+1","6.1.76-1","6.1.76-1~bpo11+1","6.1.82-1","6.1.85-1","6.1.90-1","6.1.90-1~bpo11+1","6.1.94-1","6.1.94-1~bpo11+1","6.1.98-1","6.1.99-1"],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2025-38643.json"}},{"package":{"name":"linux","ecosystem":"Debian:13","purl":"pkg:deb/debian/linux?arch=source&distro=trixie"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.57-1"}]}],"versions":["6.12.38-1","6.12.41-1","6.12.43-1","6.12.43-1~bpo12+1","6.12.48-1","6.12.57-1~bpo12+1"],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2025-38643.json"}},{"package":{"name":"linux","ecosystem":"Debian:14","purl":"pkg:deb/debian/linux?arch=source&distro=forky"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.16.3-1"}]}],"versions":["6.12.100-1","6.12.101-1","6.12.105-1","6.12.107-1","6.12.38-1","6.12.41-1","6.12.43-1","6.12.43-1~bpo12+1","6.12.48-1","6.12.57-1","6.12.57-1~bpo12+1","6.12.63-1","6.12.63-1~bpo12+1","6.12.69-1","6.12.69-1~bpo12+1","6.12.73-1","6.12.73-1~bpo12+1","6.12.74-1","6.12.74-2","6.12.74-2~bpo12+1","6.12.85-1","6.12.85-1~bpo12+1","6.12.86-1","6.12.86-1~bpo12+1","6.12.88-1","6.12.88-1~bpo12+1","6.12.90-1","6.12.90-1~bpo12+1","6.12.90-2","6.12.90-2~bpo12+1","6.12.94-1","6.12.94-1~bpo12+1","6.12.95-1","6.12.95-1~bpo12+1","6.12.96-1","6.13.10-1~exp1","6.13.11-1~exp1","6.13.2-1~exp1","6.13.3-1~exp1","6.13.4-1~exp1","6.13.5-1~exp1","6.13.6-1~exp1","6.13.7-1~exp1","6.13.8-1~exp1","6.13.9-1~exp1","6.13~rc6-1~exp1","6.13~rc7-1~exp1","6.14.3-1~exp1","6.14.5-1~exp1","6.14.6-1~exp1","6.15-1~exp1","6.15.1-1~exp1","6.15.2-1~exp1","6.15.3-1~exp1","6.15.4-1~exp1","6.15.5-1~exp1","6.15.6-1~exp1","6.15~rc7-1~exp1","6.16-1~exp1","6.16.1-1~exp1","6.16.3-1~bpo13+1","6.16~rc7-1~exp1"],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2025-38643.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"}]}