CVE-2025-21906CWE-665

CVE-2025-21906

High · published April 1, 2025

CVSS v3.1
7.6
EPSS
0%
Percentile
11.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

wifi: iwlwifi: mvm: clean up ROC on failure

If the firmware fails to start the session protection, then we

do call iwl_mvm_roc_finished() here, but that won't do anything

at all because IWL_MVM_STATUS_ROC_P2P_RUNNING was never set.

Set IWL_MVM_STATUS_ROC_P2P_RUNNING in the failure/stop path.

If it started successfully before, it's already set, so that

doesn't matter, and if it didn't start it needs to be set to

clean up.

Not doing so will lead to a WARN_ON() later on a fresh remain-

on-channel, since the link is already active when activated as

it was never deactivated.

The record
Technical detail
CVSS v3.1
7.6 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00220 · 11.9th percentile
Weakness
CWE-665 · Improper Initialization
Published
2025-04-01T20:15Z
Affected products (7)
ProductVersionsFixed in
linux/linux_kernel≥ 6.9, < 6.12.196.12.19
linux/linux_kernel≥ 6.13, < 6.13.76.13.7
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (3)
EPSS history
Timeline
  • 01 APR 15:40Z
    wifi: iwlwifi: mvm: clean up ROC on failure
    cvelistv5