CVE-2025-21744

Summary

CVE-2025-21744 is a Linux kernel vulnerability affecting the brcmfmac driver in Wi-Fi adapters. The issue arises when removing a device or unloading the kernel module, leading to a NULL pointer dereference in brcmf_txfinalize() during the update of ifp->ndev->stats.tx_errors. This occurs because brcmf_get_ifp() may return NULL after brcmf_remove_interface() is called, and the sequence of function calls results in the execution of brcmf_txfinalize() with a NULL pointer. This vulnerability is only exploitable if a flowring still has an skb. The other uses of the ifp pointer have been guarded against NULL values.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.