Riskcovery

CVE-2025-71227

wifi: mac80211: don't WARN for connections on invalid channels

State
Published
Severity
Not scored
Published
Feb 18, 2026
Updated
Oct 30, 2026
Reserved
Feb 14, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: mac80211: don't WARN for connections on invalid channels

It's not clear (to me) how exactly syzbot managed to hit this, but it seems conceivable that e.g. regulatory changed and has disabled a channel between scanning (channel is checked to be usable by cfg80211_get_ies_channel_number) and connecting on the channel later.

With one scenario that isn't covered elsewhere described above, the warning isn't good, replace it with a (more informative) error message.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • f2d9d270c15ae0139b54a7e7466d738327e97e03 to before 6acc2d23f13d60874981b4828ba156ba01c86510Affected
  • f2d9d270c15ae0139b54a7e7466d738327e97e03 to before c02b1d244a5d799696ca74d3fba6539c8d76195fAffected
  • f2d9d270c15ae0139b54a7e7466d738327e97e03 to before 579cf5939f8f4c4f88c75862d0c573fb13567b74Affected
  • f2d9d270c15ae0139b54a7e7466d738327e97e03 to before 10d3ff7e5812c8d70300f6fa8f524009a06aa7e1Affected
  • f2d9d270c15ae0139b54a7e7466d738327e97e03 to before 99067b58a408a384d2a45c105eb3dce980a862ceAffected
LinuxLinux
  • 3.8Affected
  • before 3.8Not affected
  • 6.1.191 through 6.1.*Not affected
  • 6.6.160 through 6.6.*Not affected
  • 6.12.114 through 6.12.*Not affected
  • 6.18.10 through 6.18.*Not affected
  • 6.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.