Linux Kernel Vulnerability in iwlwifi Wi-Fi Driver

CVE-2025-21905

Summary

A vulnerability within the iwlwifi driver in the Linux kernel has been identified that allows reading data beyond the intended buffer size. This weakness arises when the firmware file lacks proper NUL-termination, potentially leading to out-of-bounds reads when the last TLV in the file is processed. To mitigate this issue, a fix has been implemented that restricts the printed string format to align with the available buffer size, thereby enhancing the integrity and security of the system.

References