Riskcovery

CVE-2025-21906

wifi: iwlwifi: mvm: clean up ROC on failure

State
Published
Severity
7.6 High
Published
Apr 1, 2025
Updated
Oct 15, 2026
Reserved
Dec 29, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: iwlwifi: mvm: clean up ROC on failure

If the firmware fails to start the session protection, then we do call iwl_mvm_roc_finished() here, but that won't do anything at all because IWL_MVM_STATUS_ROC_P2P_RUNNING was never set. Set IWL_MVM_STATUS_ROC_P2P_RUNNING in the failure/stop path. If it started successfully before, it's already set, so that doesn't matter, and if it didn't start it needs to be set to clean up.

Not doing so will lead to a WARN_ON() later on a fresh remain- on-channel, since the link is already active when activated as it was never deactivated.

Scores

CVSSScoreVectorSource
3.17.6 HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 35c1bbd93c4e6969b3ac238b48a8bdff3e223ed8 to before a88c18409b5d69f426d5acc583c053eac71756a3Affected
  • 35c1bbd93c4e6969b3ac238b48a8bdff3e223ed8 to before d1a12fcb9051bbf38b2e5af310ffb102a0fab6f9Affected
  • 35c1bbd93c4e6969b3ac238b48a8bdff3e223ed8 to before f9751163bffd3fe60794929829f810968c6de73dAffected
LinuxLinux
  • 6.9Affected
  • before 6.9Not affected
  • 6.12.19 through 6.12.*Not affected
  • 6.13.7 through 6.13.*Not affected
  • 6.14 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.