{"id":"CVE-2025-71224","state":"PUBLISHED","title":"wifi: mac80211: ocb: skip rx_no_sta when interface is not joined","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211: ocb: skip rx_no_sta when interface is not joined\n\nieee80211_ocb_rx_no_sta() assumes a valid channel context, which is only\npresent after JOIN_OCB.\n\nRX may run before JOIN_OCB is executed, in which case the OCB interface\nis not operational. Skip RX peer handling when the interface is not\njoined to avoid warnings in the RX path.","publishedAt":"2026-02-14T16:27:06.752Z","updatedAt":"2026-05-11T21:56:46.366Z","severity":null,"assigner":"Linux","products":["Linux Linux"],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"239281f803e2efdb77d906ef296086b6917e5d71","status":"affected","lessThan":"fcc768760df08337525cde28e8460e36f9855af8","versionType":"git"},{"version":"239281f803e2efdb77d906ef296086b6917e5d71","status":"affected","lessThan":"b04c75366a5471ae2dd7f4c33b7f1e2c08b9b32d","versionType":"git"},{"version":"239281f803e2efdb77d906ef296086b6917e5d71","status":"affected","lessThan":"8fd1c63e016893b7f6c1cf799410da4eaa98c090","versionType":"git"},{"version":"239281f803e2efdb77d906ef296086b6917e5d71","status":"affected","lessThan":"ffe1e19c3b0e5b9eb9e04fad4bce7d1dc407fd77","versionType":"git"},{"version":"239281f803e2efdb77d906ef296086b6917e5d71","status":"affected","lessThan":"536447521b3b9be1975c7f1db9054bdf2ab779cb","versionType":"git"},{"version":"239281f803e2efdb77d906ef296086b6917e5d71","status":"affected","lessThan":"e0bd226804f8e0098711042c93d64f3b720b36c0","versionType":"git"},{"version":"239281f803e2efdb77d906ef296086b6917e5d71","status":"affected","lessThan":"ff4071c60018a668249dc6a2df7d16330543540e","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["net/mac80211/ocb.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"3.19","status":"affected"},{"version":"0","status":"unaffected","lessThan":"3.19","versionType":"semver"},{"version":"5.10.250","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.200","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"6.1.163","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.6.124","status":"unaffected","lessThanOrEqual":"6.6.*","versionType":"semver"},{"version":"6.12.70","status":"unaffected","lessThanOrEqual":"6.12.*","versionType":"semver"},{"version":"6.18.10","status":"unaffected","lessThanOrEqual":"6.18.*","versionType":"semver"},{"version":"6.19","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["net/mac80211/ocb.c"]}],"references":["https://git.kernel.org/stable/c/fcc768760df08337525cde28e8460e36f9855af8","https://git.kernel.org/stable/c/b04c75366a5471ae2dd7f4c33b7f1e2c08b9b32d","https://git.kernel.org/stable/c/8fd1c63e016893b7f6c1cf799410da4eaa98c090","https://git.kernel.org/stable/c/ffe1e19c3b0e5b9eb9e04fad4bce7d1dc407fd77","https://git.kernel.org/stable/c/536447521b3b9be1975c7f1db9054bdf2ab779cb","https://git.kernel.org/stable/c/e0bd226804f8e0098711042c93d64f3b720b36c0","https://git.kernel.org/stable/c/ff4071c60018a668249dc6a2df7d16330543540e"],"weaknesses":[],"ingestedAt":"2026-10-29T20:10:04.440Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/71xxx/CVE-2025-71224.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2025-71224","state":"PUBLISHED","datePublished":"2026-02-14T16:27:06.752Z","dateUpdated":"2026-05-11T21:56:46.366Z","assignerShortName":"Linux","assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateReserved":"2026-02-14T16:26:02.969Z"},"containers":{"cna":{"title":"wifi: mac80211: ocb: skip rx_no_sta when interface is not joined","descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211: ocb: skip rx_no_sta when interface is not joined\n\nieee80211_ocb_rx_no_sta() assumes a valid channel context, which is only\npresent after JOIN_OCB.\n\nRX may run before JOIN_OCB is executed, in which case the OCB interface\nis not operational. Skip RX peer handling when the interface is not\njoined to avoid warnings in the RX path."}],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"239281f803e2efdb77d906ef296086b6917e5d71","status":"affected","lessThan":"fcc768760df08337525cde28e8460e36f9855af8","versionType":"git"},{"version":"239281f803e2efdb77d906ef296086b6917e5d71","status":"affected","lessThan":"b04c75366a5471ae2dd7f4c33b7f1e2c08b9b32d","versionType":"git"},{"version":"239281f803e2efdb77d906ef296086b6917e5d71","status":"affected","lessThan":"8fd1c63e016893b7f6c1cf799410da4eaa98c090","versionType":"git"},{"version":"239281f803e2efdb77d906ef296086b6917e5d71","status":"affected","lessThan":"ffe1e19c3b0e5b9eb9e04fad4bce7d1dc407fd77","versionType":"git"},{"version":"239281f803e2efdb77d906ef296086b6917e5d71","status":"affected","lessThan":"536447521b3b9be1975c7f1db9054bdf2ab779cb","versionType":"git"},{"version":"239281f803e2efdb77d906ef296086b6917e5d71","status":"affected","lessThan":"e0bd226804f8e0098711042c93d64f3b720b36c0","versionType":"git"},{"version":"239281f803e2efdb77d906ef296086b6917e5d71","status":"affected","lessThan":"ff4071c60018a668249dc6a2df7d16330543540e","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["net/mac80211/ocb.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"3.19","status":"affected"},{"version":"0","status":"unaffected","lessThan":"3.19","versionType":"semver"},{"version":"5.10.250","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.200","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"6.1.163","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.6.124","status":"unaffected","lessThanOrEqual":"6.6.*","versionType":"semver"},{"version":"6.12.70","status":"unaffected","lessThanOrEqual":"6.12.*","versionType":"semver"},{"version":"6.18.10","status":"unaffected","lessThanOrEqual":"6.18.*","versionType":"semver"},{"version":"6.19","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["net/mac80211/ocb.c"]}],"references":[{"url":"https://git.kernel.org/stable/c/fcc768760df08337525cde28e8460e36f9855af8"},{"url":"https://git.kernel.org/stable/c/b04c75366a5471ae2dd7f4c33b7f1e2c08b9b32d"},{"url":"https://git.kernel.org/stable/c/8fd1c63e016893b7f6c1cf799410da4eaa98c090"},{"url":"https://git.kernel.org/stable/c/ffe1e19c3b0e5b9eb9e04fad4bce7d1dc407fd77"},{"url":"https://git.kernel.org/stable/c/536447521b3b9be1975c7f1db9054bdf2ab779cb"},{"url":"https://git.kernel.org/stable/c/e0bd226804f8e0098711042c93d64f3b720b36c0"},{"url":"https://git.kernel.org/stable/c/ff4071c60018a668249dc6a2df7d16330543540e"}],"providerMetadata":{"shortName":"Linux","orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateUpdated":"2026-05-11T21:56:46.366Z"},"cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.19","versionEndExcluding":"5.10.250"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.19","versionEndExcluding":"5.15.200"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.19","versionEndExcluding":"6.1.163"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.19","versionEndExcluding":"6.6.124"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.19","versionEndExcluding":"6.12.70"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.19","versionEndExcluding":"6.18.10"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.19","versionEndExcluding":"6.19"}]}]}],"x_generator":{"engine":"bippy-1.2.0"}}}}}