PT-2025-8813 · Linux+1 · Linux Kernel+1

Published 2025-01-03 · Updated 2026-04-20 · CVE-2025-21730

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been identified, related to the wifi driver rtw89. The issue occurs when WoWLAN (Wake-on-Wireless-LAN) fails during the resume flow, causing the mgnt entry list to be initialized twice. This leads to a list corruption and a kernel bug. The vulnerability is triggered by the rtw89 ops add interface() function without removing the interface first, resulting in the list add tail() function being called again. Technical details about the issue include the rtw89 chanctx ops assign vif() function and the list add valid or report() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2025-11965

CVE-2025-21730

Affected Products

Astra Linux

Linux Kernel

References · 22

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/21xxx/CVE-2025-21730.json · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-21730 · Vendor Advisory
• https://git.kernel.org/stable/c/2f7667675df1b40b73ecc53b4b8c3189b1e5f2c1 · Patch
• https://linux.oracle.com/errata/ELSA-2025-20480.html · Vendor Advisory
• https://git.kernel.org/stable/c/4ed5bf49819757303e657f3900725febf2f3926f · Patch
• https://cve.org/CVERecord?id=CVE-2025-21730 · Security Note
• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2025-0811SE18 · Vendor Advisory
• https://git.kernel.org/stable/c/7fc295fdd3992a9a07d12fd3f2e84dface23aedc · Patch
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2025-21730 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-11965 · Security Note
• https://ubuntu.com/security/CVE-2025-21730 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-21730 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2025-20530.html · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-21730 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-21730 · Vendor Advisory