Linux · Linux Kernel · CVE-2025-22119
**Name of the Vulnerable Software and Affected Versions**
Linux kernel versions prior to 6.14.0-rc6-syzkaller-00103-g4003c9e78778
**Description**
A vulnerability in the Linux kernel has been resolved, related to the initialization of `wiphy work` before allocating `rfkill`. If `rfkill` allocation fails, the `wiphy` release process will be performed, causing `cfg80211 dev free` to access uninitialized `wiphy work` related data. The issue is fixed by moving the initialization of `wiphy work` to before `rfkill` initialization.
**Recommendations**
For Linux kernel versions prior to 6.14.0-rc6-syzkaller-00103-g4003c9e78778, update to a newer version to resolve the issue. As a temporary workaround, consider disabling the `cfg80211 dev free` function until a patch is available. Restrict access to the vulnerable `wiphy` module to minimize the risk of exploitation. Avoid using the `wiphy work` variable in the affected API endpoints until the issue is resolved.