CVE-2025-68182

CVE-2025-68182

High · published December 16, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
11.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

wifi: iwlwifi: fix potential use after free in iwl_mld_remove_link()

This code frees "link" by calling kfree_rcu(link, rcu_head) and then it

dereferences "link" to get the "link->fw_id". Save the "link->fw_id"

first to avoid a potential use after free.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00220 · 11.9th percentile
Published
2025-12-16T19:15Z
References (2)
https://git.kernel.org/stable/c/5b4a239c9f94e1606435f1842fc6fd426d607dbb · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/77e67d5daaf155f7d0f99f4e797c4842169ec19e · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 16 DEC 13:43Z
    wifi: iwlwifi: fix potential use after free in iwl_mld_remove_link()
    cvelistv5