CVE-2025-21979: wifi: cfg80211: cancel wiphy_work before freeing wiphy
In the Linux kernel, the following vulnerability has been resolved:
wifi: cfg80211: cancel wiphywork before freeing wiphy
A wiphywork can be queued from the moment the wiphy is allocated and initialized (i.e. wiphynewnm). When a wiphywork is queued, the rdev::wiphywork is getting queued.
If wiphyfree is called before the rdev::wiphywork had a chance to run, the wiphy memory will be freed, and then when it eventally gets to run it'll use invalid memory.
Fix this by canceling the work before freeing the wiphy.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-21979?
CVE-2025-21979 is classified as a medium severity vulnerability impacting the Linux kernel.
How do I fix CVE-2025-21979?
To fix CVE-2025-21979, update to the latest version of the Linux kernel that includes the necessary patches.
What systems are affected by CVE-2025-21979?
CVE-2025-21979 affects various versions of the Linux kernel where the wifi cfg80211 subsystem is used.
What are the potential impacts of CVE-2025-21979?
If exploited, CVE-2025-21979 may lead to denial of service due to improper handling of wiphy_work structures.
Is CVE-2025-21979 publicly known?
Yes, CVE-2025-21979 has been publicly disclosed and documented for awareness and remediation.