CVE-2007-5938
The iwl_set_rate function in compatible/iwl3945-base.c in iwlwifi 1.1.21 and earlier dereferences...
The iwl_set_rate function in compatible/iwl3945-base.c in iwlwifi 1.1.21 and earlier dereferences an iwl_get_hw_mode return value without checking for NULL, which might allow remote attackers to cause a denial of service (kernel panic) via unspecified vectors during module initialization.
Exploit likelihood
What each source reports
NVD Score used
5.0
The iwl_set_rate function in compatible/iwl3945-base.c in iwlwifi 1.1.21 and earlier dereferences an iwl_get_hw_mode return value without checking for NULL, which might allow remote attackers to cause a denial of service (kernel panic) via unspecified vectors during module initialization.
- Record
CVE-2007-5938- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-189
- Updated
- 2026-11-02
CVE List No score
The iwl_set_rate function in compatible/iwl3945-base.c in iwlwifi 1.1.21 and earlier dereferences an iwl_get_hw_mode return value without checking for NULL, which might allow remote attackers to cause a denial of service (kernel panic) via unspecified vectors during module initialization.
- Record
CVE-2007-5938- Updated
- 2026-11-02
EUVDEUVD-2007-5908 No score
The iwl_set_rate function in compatible/iwl3945-base.c in iwlwifi 1.1.21 and earlier dereferences an iwl_get_hw_mode return value without checking for NULL, which might allow remote attackers to cause a denial of service (kernel panic) via unspecified vectors during module initialization.
- Record
EUVD-2007-5908- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-rmcg-hfrp-gr58 No score
The iwl_set_rate function in compatible/iwl3945-base.c in iwlwifi 1.1.21 and earlier dereferences...
The iwl_set_rate function in compatible/iwl3945-base.c in iwlwifi 1.1.21 and earlier dereferences an iwl_get_hw_mode return value without checking for NULL, which might allow remote attackers to cause a denial of service (kernel panic) via unspecified vectors during module initialization.
- Record
GHSA-rmcg-hfrp-gr58- Updated
- 2026-11-02
OSVBELL-CVE-2007-5938
5.0
CVE-2007-5938 does not affect BellSoft software
- Record
BELL-CVE-2007-5938- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
kernelRed Hat:enterprise_linux:5::client From an advisory covering 5 CVEs |
before 0:2.6.18-53.1.14.el5 | 0:2.6.18-53.1.14.el5 |
kernel-PAERed Hat:enterprise_linux:5::client From an advisory covering 5 CVEs |
before 0:2.6.18-53.1.14.el5 | 0:2.6.18-53.1.14.el5 |
kernel-PAE-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 5 CVEs |
before 0:2.6.18-53.1.14.el5 | 0:2.6.18-53.1.14.el5 |
kernel-PAE-develRed Hat:enterprise_linux:5::client From an advisory covering 5 CVEs |
before 0:2.6.18-53.1.14.el5 | 0:2.6.18-53.1.14.el5 |
kernel-debugRed Hat:enterprise_linux:5::client From an advisory covering 5 CVEs |
before 0:2.6.18-53.1.14.el5 | 0:2.6.18-53.1.14.el5 |
kernel-debug-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 5 CVEs |
before 0:2.6.18-53.1.14.el5 | 0:2.6.18-53.1.14.el5 |
kernel-debug-develRed Hat:enterprise_linux:5::client From an advisory covering 5 CVEs |
before 0:2.6.18-53.1.14.el5 | 0:2.6.18-53.1.14.el5 |
kernel-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 5 CVEs |
before 0:2.6.18-53.1.14.el5 | 0:2.6.18-53.1.14.el5 |
kernel-debuginfo-commonRed Hat:enterprise_linux:5::client From an advisory covering 5 CVEs |
before 0:2.6.18-53.1.14.el5 | 0:2.6.18-53.1.14.el5 |
kernel-develRed Hat:enterprise_linux:5::client From an advisory covering 5 CVEs |
before 0:2.6.18-53.1.14.el5 | 0:2.6.18-53.1.14.el5 |
Show 23 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernel-docRed Hat:enterprise_linux:5::client From an advisory covering 5 CVEs |
before 0:2.6.18-53.1.14.el5 | 0:2.6.18-53.1.14.el5 |
kernel-headersRed Hat:enterprise_linux:5::client From an advisory covering 5 CVEs |
before 0:2.6.18-53.1.14.el5 | 0:2.6.18-53.1.14.el5 |
kernel-xenRed Hat:enterprise_linux:5::client From an advisory covering 5 CVEs |
before 0:2.6.18-53.1.14.el5 | 0:2.6.18-53.1.14.el5 |
kernel-xen-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 5 CVEs |
before 0:2.6.18-53.1.14.el5 | 0:2.6.18-53.1.14.el5 |
kernel-xen-develRed Hat:enterprise_linux:5::client From an advisory covering 5 CVEs |
before 0:2.6.18-53.1.14.el5 | 0:2.6.18-53.1.14.el5 |
kernelRed Hat:enterprise_linux:5::server From an advisory covering 5 CVEs |
before 0:2.6.18-53.1.14.el5 | 0:2.6.18-53.1.14.el5 |
kernel-PAERed Hat:enterprise_linux:5::server From an advisory covering 5 CVEs |
before 0:2.6.18-53.1.14.el5 | 0:2.6.18-53.1.14.el5 |
kernel-PAE-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 5 CVEs |
before 0:2.6.18-53.1.14.el5 | 0:2.6.18-53.1.14.el5 |
kernel-PAE-develRed Hat:enterprise_linux:5::server From an advisory covering 5 CVEs |
before 0:2.6.18-53.1.14.el5 | 0:2.6.18-53.1.14.el5 |
kernel-debugRed Hat:enterprise_linux:5::server From an advisory covering 5 CVEs |
before 0:2.6.18-53.1.14.el5 | 0:2.6.18-53.1.14.el5 |
kernel-debug-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 5 CVEs |
before 0:2.6.18-53.1.14.el5 | 0:2.6.18-53.1.14.el5 |
kernel-debug-develRed Hat:enterprise_linux:5::server From an advisory covering 5 CVEs |
before 0:2.6.18-53.1.14.el5 | 0:2.6.18-53.1.14.el5 |
kernel-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 5 CVEs |
before 0:2.6.18-53.1.14.el5 | 0:2.6.18-53.1.14.el5 |
kernel-debuginfo-commonRed Hat:enterprise_linux:5::server From an advisory covering 5 CVEs |
before 0:2.6.18-53.1.14.el5 | 0:2.6.18-53.1.14.el5 |
kernel-develRed Hat:enterprise_linux:5::server From an advisory covering 5 CVEs |
before 0:2.6.18-53.1.14.el5 | 0:2.6.18-53.1.14.el5 |
kernel-docRed Hat:enterprise_linux:5::server From an advisory covering 5 CVEs |
before 0:2.6.18-53.1.14.el5 | 0:2.6.18-53.1.14.el5 |
kernel-headersRed Hat:enterprise_linux:5::server From an advisory covering 5 CVEs |
before 0:2.6.18-53.1.14.el5 | 0:2.6.18-53.1.14.el5 |
kernel-kdumpRed Hat:enterprise_linux:5::server From an advisory covering 5 CVEs |
before 0:2.6.18-53.1.14.el5 | 0:2.6.18-53.1.14.el5 |
kernel-kdump-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 5 CVEs |
before 0:2.6.18-53.1.14.el5 | 0:2.6.18-53.1.14.el5 |
kernel-kdump-develRed Hat:enterprise_linux:5::server From an advisory covering 5 CVEs |
before 0:2.6.18-53.1.14.el5 | 0:2.6.18-53.1.14.el5 |
kernel-xenRed Hat:enterprise_linux:5::server From an advisory covering 5 CVEs |
before 0:2.6.18-53.1.14.el5 | 0:2.6.18-53.1.14.el5 |
kernel-xen-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 5 CVEs |
before 0:2.6.18-53.1.14.el5 | 0:2.6.18-53.1.14.el5 |
kernel-xen-develRed Hat:enterprise_linux:5::server From an advisory covering 5 CVEs |
before 0:2.6.18-53.1.14.el5 | 0:2.6.18-53.1.14.el5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| affected, aliases, facts, references, title | GitHub Advisories, OSV | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-5938 is a medium vulnerability (CVSS 5.0) in Intel Pro Wireless 3945abg, published December 6, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.14%, the 82nd percentile. No source names a fixed version.
References
bugs.gentoo.org/show_bug.cgi?id=199209
redhat.com/support/errata/RHSA-2008-0154.html
osvdb.org/44749
vupen.com/english/advisories/2007/4211
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10787
secunia.com/advisories/29236
Show 40 moreShow less
securityfocus.com/bid/26842
article.gmane.org/gmane.linux.drivers.ipw3945.devel/1618
intellinuxwireless.org/repos?p=iwlwifi.git%3Ba=commitdiff%3Bh=25db44d4cdfe31d59223d74cb577f4a71aff1a40
nvd.nist.gov/vuln/detail/CVE-2007-5938
intellinuxwireless.org/repos?p=iwlwifi.git;a=commitdiff;h=25db44d4cdfe31d59223d74cb577f4a71aff1a40
github.com/advisories/GHSA-rmcg-hfrp-gr58
docs.bell-sw.com/security/cves/CVE-2007-5938
access.redhat.com/errata/RHSA-2008:0154
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=302921
bugzilla.redhat.com/show_bug.cgi?id=310651
bugzilla.redhat.com/show_bug.cgi?id=385861
bugzilla.redhat.com/show_bug.cgi?id=392101
bugzilla.redhat.com/show_bug.cgi?id=396751
bugzilla.redhat.com/show_bug.cgi?id=402911
bugzilla.redhat.com/show_bug.cgi?id=406881
bugzilla.redhat.com/show_bug.cgi?id=424191
bugzilla.redhat.com/show_bug.cgi?id=424271
bugzilla.redhat.com/show_bug.cgi?id=428290
bugzilla.redhat.com/show_bug.cgi?id=429108
bugzilla.redhat.com/show_bug.cgi?id=429515
bugzilla.redhat.com/show_bug.cgi?id=429539
bugzilla.redhat.com/show_bug.cgi?id=430632
bugzilla.redhat.com/show_bug.cgi?id=431522
bugzilla.redhat.com/show_bug.cgi?id=432078
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0154.json
access.redhat.com/security/cve/CVE-2006-6921
cve.org/CVERecord?id=CVE-2006-6921
nvd.nist.gov/vuln/detail/CVE-2006-6921
access.redhat.com/security/cve/CVE-2007-5938
cve.org/CVERecord?id=CVE-2007-5938
access.redhat.com/security/cve/CVE-2007-6063
cve.org/CVERecord?id=CVE-2007-6063
nvd.nist.gov/vuln/detail/CVE-2007-6063
access.redhat.com/security/cve/CVE-2007-6207
cve.org/CVERecord?id=CVE-2007-6207
nvd.nist.gov/vuln/detail/CVE-2007-6207
access.redhat.com/security/cve/CVE-2007-6694
cve.org/CVERecord?id=CVE-2007-6694
nvd.nist.gov/vuln/detail/CVE-2007-6694