List Corruption Vulnerability in Linux Kernel Affecting rtw89 Wireless Driver by Realtek

CVE-2025-21730

Summary

A vulnerability has been identified in the Linux kernel's rtw89 wireless driver, where an improper initialization of the mgnt_entry list can occur following a failed Wake on Wireless LAN (WoWLAN) resume operation. If the WoWLAN process fails, the 'rtw89_ops_add_interface()' function may trigger without removing the interface, causing the mgnt_entry list to be initialized again. This introduces the risk of list corruption, which can lead to undefined behavior in the kernel, exposing systems to potential instability or crashes. Mitigations have been implemented to prevent the double initialization of the list, thereby enhancing the reliability of the driver.

References