Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2025-68182

wifi: iwlwifi: fix potential use after free in iwl_mld_remove_link()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: fix potential use after free in iwl_mld_remove_link() This code frees "link" by calling kfree_rcu(link, rcu_head) and then it dereferences "link" to get the "link->fw_id". Save the "link->fw_id" first to avoid a potential use after free.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • d1e879ec600f9b3bdd253167533959facfefb17b to < 5b4a239c9f94e1606435f1842fc6fd426d607dbbaffected
  • d1e879ec600f9b3bdd253167533959facfefb17b to < 77e67d5daaf155f7d0f99f4e797c4842169ec19eaffected

Linux Linux

Default version status: affected

  • 6.15affected
  • 0 to < 6.15unaffected
  • 6.17.8 to ≤ 6.17.*unaffected
  • 6.18 to ≤ *unaffected

References