Memory Management Flaw in Linux Kernel Affects Wireless Functionality

CVE-2025-21979

What is CVE-2025-21979?

A vulnerability in the Linux kernel has been identified where the cfg80211 subsystem does not properly handle queued work for wireless devices (wiphy). If the wiphy is freed before the associated work is canceled, it may lead to the use of invalid memory during execution. This flaw poses a risk to system stability and could potentially lead to unexpected behavior or crashes. It is crucial to ensure that any queued work is canceled before the associated wiphy memory is freed to mitigate this issue.

References