CVE-2025-21979
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Apr 1, 2025
Updated: Apr 10, 2025
CWE ID 416
Summary
CVE-2025-21979 is a vulnerability affecting the Linux kernel. It involves the cfg80211 subsystem where a wiphy_work could be queued before the wiphy memory is freed. This leads to the wiphy memory being freed before the wiphy_work runs, causing the invalid memory to be used when it eventually runs. The issue has been resolved by canceling the wiphy_work before freeing the wiphy to prevent using invalid memory.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Linux Kernel
Affected Vendors
- LINUX