CVE-2025-68182: wifi: iwlwifi: fix potential use after free in iwl_mld_remove_link()
In the Linux kernel, the following vulnerability has been resolved:
wifi: iwlwifi: fix potential use after free in iwlmldremovelink()
This code frees "link" by calling kfreercu(link, rcuhead) and then it dereferences "link" to get the "link->fwid". Save the "link->fwid" first to avoid a potential use after free.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-68182?
CVE-2025-68182 has been assigned a medium severity level due to the potential use after free vulnerability in the Linux kernel.
How do I fix CVE-2025-68182?
To fix CVE-2025-68182, update to the latest version of the Linux kernel where this vulnerability has been patched.
Which software is affected by CVE-2025-68182?
CVE-2025-68182 affects the Linux kernel, specifically related to the iwlwifi driver.
What is the impact of CVE-2025-68182?
The impact of CVE-2025-68182 may include potential denial of service or system instability due to the use after free condition.
Is there an exploit available for CVE-2025-68182?
As of now, there are no public exploits reported for CVE-2025-68182, but the vulnerability should still be addressed promptly.