Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Syzbort

#46302of 53,624
5.5Total CVSS
Vulnerabilities · 1
PT-2025-16759
5.5
2025-03-18
Linux · Linux Kernel · CVE-2025-22119
**Name of the Vulnerable Software and Affected Versions** Linux kernel versions prior to 6.14.0-rc6-syzkaller-00103-g4003c9e78778 **Description** A vulnerability in the Linux kernel has been resolved, related to the initialization of `wiphy work` before allocating `rfkill`. If `rfkill` allocation fails, the `wiphy` release process will be performed, causing `cfg80211 dev free` to access uninitialized `wiphy work` related data. The issue is fixed by moving the initialization of `wiphy work` to before `rfkill` initialization. **Recommendations** For Linux kernel versions prior to 6.14.0-rc6-syzkaller-00103-g4003c9e78778, update to a newer version to resolve the issue. As a temporary workaround, consider disabling the `cfg80211 dev free` function until a patch is available. Restrict access to the vulnerable `wiphy` module to minimize the risk of exploitation. Avoid using the `wiphy work` variable in the affected API endpoints until the issue is resolved.