CVE-2025-71227: wifi: mac80211: don't WARN for connections on invalid channels
In the Linux kernel, the following vulnerability has been resolved:
wifi: mac80211: don't WARN for connections on invalid channels
It's not clear (to me) how exactly syzbot managed to hit this, but it seems conceivable that e.g. regulatory changed and has disabled a channel between scanning (channel is checked to be usable by cfg80211getieschannelnumber) and connecting on the channel later.
With one scenario that isn't covered elsewhere described above, the warning isn't good, replace it with a (more informative) error message.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-71227?
CVE-2025-71227 is classified as a low severity vulnerability affecting the wifi subsystem in the Linux kernel.
How do I fix CVE-2025-71227?
To fix CVE-2025-71227, upgrade to the patched version of the Linux kernel that addresses this vulnerability.
What components are affected by CVE-2025-71227?
CVE-2025-71227 affects the mac80211 component of the wifi subsystem in the Linux kernel.
Is CVE-2025-71227 exploitable in production environments?
CVE-2025-71227 presents a minimal risk of exploitation but should still be addressed to maintain system integrity.
When was CVE-2025-71227 reported?
CVE-2025-71227 was identified and resolved in the Linux kernel but specific report dates are not detailed in the provided information.