Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2025-38644

wifi: mac80211: reject TDLS operations when station is not associated

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: reject TDLS operations when station is not associated syzbot triggered a WARN in ieee80211_tdls_oper() by sending NL80211_TDLS_ENABLE_LINK immediately after NL80211_CMD_CONNECT, before association completed and without prior TDLS setup. This left internal state like sdata->u.mgd.tdls_peer uninitialized, leading to a WARN_ON() in code paths that assumed it was valid. Reject the operation early if not in station mode or not associated.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 81dd2b8822410e56048b927be779d95a2b6dc186 to < 0c84204cf0bbe89e454a5caccc6a908bc7db1542affected
  • 81dd2b8822410e56048b927be779d95a2b6dc186 to < 378ae9ccaea3f445838a087962a067b5cb2e8577affected
  • 81dd2b8822410e56048b927be779d95a2b6dc186 to < af72badd5ee423eb16f6ad7fe0a62f1b4252d848affected
  • 81dd2b8822410e56048b927be779d95a2b6dc186 to < 4df663d4c1ca386dcab2f743dfc9f0cc07aef73caffected
  • 81dd2b8822410e56048b927be779d95a2b6dc186 to < 31af06b574394530f68a4310c45ecbe2f68853c4affected
  • 81dd2b8822410e56048b927be779d95a2b6dc186 to < 16ecdab5446f15a61ec88eb0d23d25d009821db0affected

Linux Linux

Default version status: affected

  • 3.17affected
  • 0 to < 3.17unaffected
  • 6.1.148 to ≤ 6.1.*unaffected
  • 6.6.102 to ≤ 6.6.*unaffected
  • 6.12.42 to ≤ 6.12.*unaffected
  • 6.15.10 to ≤ 6.15.*unaffected
  • 6.16.1 to ≤ 6.16.*unaffected
  • 6.17 to ≤ *unaffected

References