CVE-2025-21828

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-21828
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't flush non-uploaded STAs If STA state is pre-moved to AUTHORIZED (such as in IBSS scenarios) and insertion fails, the station is freed. In this case, the driver never knew about the station, so trying to flush it is unexpected and may crash. Check if the sta was uploaded to the driver before and fix this.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/9efb5531271fa7ebae993b2a33a705d9947c7ce6 Patch
https://git.kernel.org/stable/c/aa3ce3f8fafa0b8fb062f28024855ea8cb3f3450 Patch
https://git.kernel.org/stable/c/cd10b7fcb95a6a86c67adc54304c59a578ab16af Patch
https://git.kernel.org/stable/c/cf21ef3d430847ba864bbc9b2774fffcc03ce321 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

31 Oct 2025, 16:17

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: wifi: mac80211: no vacíe las STA no cargadas Si el estado de la STA se mueve previamente a AUTORIZADO (como en los escenarios de IBSS) y la inserción falla, la estación se libera. En este caso, el controlador nunca supo de la estación, por lo que intentar vaciarla es inesperado y puede bloquearse. Verifique si la estación se cargó al controlador antes y solucione este problema.
References () https://git.kernel.org/stable/c/9efb5531271fa7ebae993b2a33a705d9947c7ce6 - () https://git.kernel.org/stable/c/9efb5531271fa7ebae993b2a33a705d9947c7ce6 - Patch
References () https://git.kernel.org/stable/c/aa3ce3f8fafa0b8fb062f28024855ea8cb3f3450 - () https://git.kernel.org/stable/c/aa3ce3f8fafa0b8fb062f28024855ea8cb3f3450 - Patch
References () https://git.kernel.org/stable/c/cd10b7fcb95a6a86c67adc54304c59a578ab16af - () https://git.kernel.org/stable/c/cd10b7fcb95a6a86c67adc54304c59a578ab16af - Patch
References () https://git.kernel.org/stable/c/cf21ef3d430847ba864bbc9b2774fffcc03ce321 - () https://git.kernel.org/stable/c/cf21ef3d430847ba864bbc9b2774fffcc03ce321 - Patch
First Time Linux linux Kernel
Linux
CWE NVD-CWE-noinfo
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5

06 Mar 2025, 16:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-03-06 16:15

Updated : 2025-10-31 16:17

NVD link : CVE-2025-21828

Mitre link : CVE-2025-21828

CVE.ORG link : CVE-2025-21828

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo