Race Condition in Linux Kernel Affecting rtw89 Wi-Fi Driver
CVE-2025-21729

7.8HIGH

Key Information:

Vendor

Linux

Status
Vendor
CVE Published:
27 February 2025

What is CVE-2025-21729?

The Linux kernel's rtw89 Wi-Fi driver has a race condition vulnerability that occurs between the cancellation of a hardware scan and its completion. The issue arises when the 'scanning' flag is not adequately protected, allowing the 'cancel_hw_scan' function to proceed erroneously. If this happens during the hardware scan's completion, it may lead to a null pointer dereference and a use-after-free situation. The vulnerability has been addressed by restructuring the checking conditions to ensure proper mutex protection during the scan processes.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Affected Version(s)

Linux 895907779752606f6a4795abfc008509f8e38314 < 2403cb3c235d5e339b580cc3a825493769fadca8

Linux 895907779752606f6a4795abfc008509f8e38314 < 5afcd6fcd1e1c1fd6bcc9a360c121d10eddade67

Linux 895907779752606f6a4795abfc008509f8e38314

References

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.