CVE-2025-71224: wifi: mac80211: ocb: skip rx_no_sta when interface is not joined

Published Feb 14, 2026

Updated

In the Linux kernel, the following vulnerability has been resolved:

wifi: mac80211: ocb: skip rxnosta when interface is not joined

ieee80211ocbrxnosta() assumes a valid channel context, which is only present after JOINOCB.

RX may run before JOINOCB is executed, in which case the OCB interface is not operational. Skip RX peer handling when the interface is not joined to avoid warnings in the RX path.

Affected Software

2 affected componentsFixes available

Linux Linux kernel

debian/linux

6.1.176-16.1.190-16.12.107-16.12.115-27.2.12-17.2.15-1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1

Event History

Feb 14, 2026

CVE Published

via MITRE·04:27 PM

Data Sourced

via MITRE·04:27 PM

Description

Data Sourced

via NVD·05:15 PM

Description

Parent advisories

This vulnerability appears in the following advisories.

Peer vulnerabilities

Found alongside the following vulnerabilities.

Frequently Asked Questions

What is the severity of CVE-2025-71224?

CVE-2025-71224 has a risk rating of 23.

How do I fix CVE-2025-71224?

To fix CVE-2025-71224, update to the latest version of the Linux kernel that addresses this vulnerability.

Which versions of the Linux kernel are affected by CVE-2025-71224?

CVE-2025-71224 affects various versions of the Linux kernel prior to the patch that resolves the issue.

What types of systems are impacted by CVE-2025-71224?

CVE-2025-71224 impacts systems that use the mac80211 subsystem related to wireless networking in the Linux kernel.

Is CVE-2025-71224 exploitable remotely?

CVE-2025-71224 is potentially exploitable under specific conditions where the interface is not joined.