In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix invalid access to memory In ath12k_dp_rx_msdu_coalesce(), rxcb is fetched from skb and boolean is_continuation is part of rxcb. Currently, after freeing the skb, the rxcb->is_continuation accessed again which is wrong since the memory is already freed. This might lead use-after-free error. Hence, fix by locally defining bool is_continuation from rxcb, so that after freeing skb, is_continuation can be used. Compile tested only.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:13602 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: crypto: algif_hash - fix double free in hash_accept (CVE-2025-38079)

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: crypto: algif_hash - fix double free in hash_accept (CVE-2025-38079)

    * kernel: wifi: ath12k: fix invalid access to memory (CVE-2025-38292)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - wifi: ath12k: fix invalid access to memory In ath12k_dp_rx_msdu_coalesce(), rxcb is fetched from skb and     boolean is_continuation is part of rxcb. Currently, after freeing the skb, the rxcb->is_continuation     accessed again which is wrong since the memory is already freed. This might lead use-after-free error.
    Hence, fix by locally defining bool is_continuation from rxcb, so that after freeing skb, is_continuation     can be used. Compile tested only. (CVE-2025-38292)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
248465	RHEL 9 : kernel (RHSA-2025:13602)	Nessus	Red Hat Local Security Checks	high
247832	RHEL 10 : kernel (RHSA-2025:13598)	Nessus	Red Hat Local Security Checks	high
247031	Linux Distros Unpatched Vulnerability : CVE-2025-38292	Nessus	Misc.	high

Detections

Analytics

CVE-2025-38292

high

Tenable Plugins

high

high

high