Use-After-Free Vulnerability in Linux Kernel WiFi Configuration

CVE-2025-39864

What is CVE-2025-39864?

A use-after-free vulnerability exists in the Linux kernel's cfg80211 module, specifically affecting the management of beacon frame elements in wireless network configurations. This issue arises during the processing of BSS (Basic Service Set) structures where the correct handling of the 'hidden_beacon_bss' pointer is crucial. If not addressed properly, this vulnerability can lead to unexpected behaviors or potential exploitation due to memory access violations. Mitigation involves adjustments to ensure proper memory management, especially when managing the lifecycle of the last beacon frame elements.

References