Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2025-71227

wifi: mac80211: don't WARN for connections on invalid channels

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't WARN for connections on invalid channels It's not clear (to me) how exactly syzbot managed to hit this, but it seems conceivable that e.g. regulatory changed and has disabled a channel between scanning (channel is checked to be usable by cfg80211_get_ies_channel_number) and connecting on the channel later. With one scenario that isn't covered elsewhere described above, the warning isn't good, replace it with a (more informative) error message.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • f2d9d270c15ae0139b54a7e7466d738327e97e03 to < c02b1d244a5d799696ca74d3fba6539c8d76195faffected
  • f2d9d270c15ae0139b54a7e7466d738327e97e03 to < 579cf5939f8f4c4f88c75862d0c573fb13567b74affected
  • f2d9d270c15ae0139b54a7e7466d738327e97e03 to < 10d3ff7e5812c8d70300f6fa8f524009a06aa7e1affected
  • f2d9d270c15ae0139b54a7e7466d738327e97e03 to < 99067b58a408a384d2a45c105eb3dce980a862ceaffected

Linux Linux

Default version status: affected

  • 3.8affected
  • 0 to < 3.8unaffected
  • 6.6.160 to ≤ 6.6.*unaffected
  • 6.12.114 to ≤ 6.12.*unaffected
  • 6.18.10 to ≤ 6.18.*unaffected
  • 6.19 to ≤ *unaffected

References