CVE-2025-21906: wifi: iwlwifi: mvm: clean up ROC on failure
In the Linux kernel, the following vulnerability has been resolved:
wifi: iwlwifi: mvm: clean up ROC on failure
If the firmware fails to start the session protection, then we do call iwlmvmrocfinished() here, but that won't do anything at all because IWLMVMSTATUSROCP2PRUNNING was never set. Set IWLMVMSTATUSROCP2PRUNNING in the failure/stop path. If it started successfully before, it's already set, so that doesn't matter, and if it didn't start it needs to be set to clean up.
Not doing so will lead to a WARNON() later on a fresh remain- on-channel, since the link is already active when activated as it was never deactivated.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-21906?
CVE-2025-21906 has been classified with a medium severity level due to its impact on the Linux kernel's wifi functionality.
How do I fix CVE-2025-21906?
To fix CVE-2025-21906, ensure you update your Linux kernel to the latest patched version provided by your distribution.
What types of systems are affected by CVE-2025-21906?
CVE-2025-21906 affects systems running vulnerable versions of the Linux kernel that utilize the iwlwifi driver.
What are the potential impacts of CVE-2025-21906?
The potential impacts of CVE-2025-21906 include instability in wifi session management during certain operational failures.
When was CVE-2025-21906 published?
CVE-2025-21906 was published on the date when the vulnerability breakdown and responses were first documented by the maintainer.