Riskcovery

CVE-2025-68182

wifi: iwlwifi: fix potential use after free in iwl_mld_remove_link()

State
Published
Severity
7.5 High
Published
Dec 16, 2025
Updated
Oct 15, 2026
Reserved
Dec 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: iwlwifi: fix potential use after free in iwl_mld_remove_link()

This code frees "link" by calling kfree_rcu(link, rcu_head) and then it dereferences "link" to get the "link->fw_id". Save the "link->fw_id" first to avoid a potential use after free.

Scores

CVSSScoreVectorSource
3.17.5 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • d1e879ec600f9b3bdd253167533959facfefb17b to before 5b4a239c9f94e1606435f1842fc6fd426d607dbbAffected
  • d1e879ec600f9b3bdd253167533959facfefb17b to before 77e67d5daaf155f7d0f99f4e797c4842169ec19eAffected
LinuxLinux
  • 6.15Affected
  • before 6.15Not affected
  • 6.17.8 through 6.17.*Not affected
  • 6.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.