CVE-2025-22032

Summary

CVE-2025-22032: A kernel panic vulnerability in the Linux kernel wifi driver mt76, specifically in the mt7921 chipset, has been identified and resolved. The issue stemmed from a null pointer dereference in the `mt792x_rx_get_wcid` function due to an uninitialized `deflink` structure. This patch ensures proper initialization of the `deflink` structure, thereby preventing the null pointer dereference and potential system crash. The vulnerability, marked by a not-present page fault, occurred during the execution of the `mt792x_rx_get_wcid` function in the mt76-usb-rx phy process.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.