Linux Kernel Vulnerability in WiFi TDLS Operations by Vendor Linux

CVE-2025-38644

What is CVE-2025-38644?

A vulnerability exists within the Linux kernel's handling of WiFi TDLS operations, where an improper sequence of commands can lead to uninitialized internal states. Specifically, if NL80211_TDLS_ENABLE_LINK is sent immediately after NL80211_CMD_CONNECT, before the association completes and without prior TDLS setup, it triggers a warning within ieee80211_tdls_oper(). The subsequent assumption of valid states could lead to unexpected behavior or compromised network integrity. The exploit calls for early rejection of TDLS operations if the device is not in station mode or not properly associated.

References