Null Pointer Dereference Vulnerability in Linux Kernel WiFi Driver by Vendor Linux

CVE-2025-40066

What is CVE-2025-40066?

A vulnerability exists within the Linux kernel's WiFi driver, specifically in the mt76 module. This flaw occurs in the mt7996 component during the initialization of station links. If a NULL pointer is not correctly handled before executing the initialization routine, it could lead to a dereference error, potentially causing system instability. The vulnerability has been addressed by ensuring the phy pointer is validated prior to invoking the initialization function, significantly enhancing system reliability and security.

References