PT-2025-14286 · Linux+11 · Linux Kernel+11

Published 2025-02-09 · Updated 2026-04-20 · CVE-2025-21905

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A issue in the Linux kernel has been identified, specifically in the iwlwifi component related to wifi functionality. The problem arises from the potential lack of NUL-termination in a file, which could lead to reading beyond the end of a TLV (Type-Length-Value) or even beyond the end of the file buffer. This is resolved by limiting the print format to the size of the available buffer, preventing potential overreads.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Out of bounds Read

Buffer Overflow

Weakness Enumeration

CWE-125

CWE-119

Related Identifiers

ALSA-2025:11428

ALSA-2025:11850

ALSA-2025:11851

ALSA-2025:11861

ALT-PU-2025-12647

ALT-PU-2025-5437

ALT-PU-2025-5786

AZL-60343

AZL-60358

BDU:2025-04806

CESA-2025_11850

CESA-2025_11851

CVE-2025-21905

DLA-4178-1

DLA-4193-1

DSA-5900-1

ECHO-943F-1505-F905

INFSA-2025_11850

INFSA-2025_11851

INFSA-2025_11861

OPENSUSE-SU-2025_01614-1

OPENSUSE-SU-2025_01707-1

RHSA-2025:11428

RHSA-2025:11810

RHSA-2025:11850

RHSA-2025:11851

RHSA-2025:11861

RHSA-2025:12209

RHSA-2025:12238

RHSA-2025:12311

RHSA-2025:12525

RHSA-2025:12526

RHSA-2025:12623

RHSA-2025:13061

RHSA-2025:13099

RHSA-2025_11850

RHSA-2025_11851

RHSA-2025_11861

SUSE-SU-2025:01614-1

SUSE-SU-2025:01707-1

SUSE-SU-2025:01919-1

SUSE-SU-2025:01951-1

SUSE-SU-2025:01964-1

SUSE-SU-2025:01967-1

SUSE-SU-2025:20192-1

SUSE-SU-2025:20206-1

SUSE-SU-2025:20270-1

SUSE-SU-2025:20283-1

SUSE-SU-2025_01614-1

SUSE-SU-2025_01707-1

SUSE-SU-2025_01951-1

SUSE-SU-2025_01964-1

SUSE-SU-2025_01967-1

USN-7510-1

USN-7510-2

USN-7510-3

USN-7510-4

USN-7510-5

USN-7510-6

USN-7510-7

USN-7510-8

USN-7511-1

USN-7511-2

USN-7511-3

USN-7512-1

USN-7516-1

USN-7516-2

USN-7516-3

USN-7516-4

USN-7516-5

USN-7516-6

USN-7516-7

USN-7516-8

USN-7516-9

USN-7517-1

USN-7517-2

USN-7517-3

USN-7518-1

USN-7539-1

USN-7540-1

USN-7593-1

USN-7602-1

USN-7605-1

USN-7605-2

USN-7606-1

USN-7628-1

USN-7640-1

USN-7764-1

USN-7764-2

USN-7765-1

USN-7766-1

USN-7767-1

USN-7767-2

USN-7779-1

USN-7790-1

USN-7800-1

USN-7801-1

USN-7801-2

USN-7801-3

USN-7802-1

USN-7809-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Debian

Linuxmint

Linux Kernel

Red Hat

Red Os

Rocky Linux

Suse

Ubuntu

References · 2325

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/21xxx/CVE-2025-21905.json · Exploit
• https://osv.dev/vulnerability/ALSA-2025:11850 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-53161 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-52332 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-57910 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21945 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-35958 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7510-4 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-53101 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2025:11851 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7809-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-22034 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7516-4 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-22022 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-23138 · Vendor Advisory