CVE-2025-21905

HIGH EPSS 9.2%
Published Apr 1, 20251y ago · Modified Jun 17, 20262w ago
7.1 CVSS 3.1
High
Find Similar
Published Apr 1, 2025 1y ago
Last Modified Jun 17, 2026 2w ago

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: limit printed string from FW file There's no guarantee here that the file is always with a NUL-termination, so reading the string may read beyond the end of the TLV. If that's the last TLV in the file, it can perhaps even read beyond the end of the file buffer. Fix that by limiting the print format to the size of the buffer we have.

CVSS Details

Base Score
7.1
Exploitability
1.8
Impact
5.2
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality High
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
9.2% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-125 Out-of-bounds Read Memory Safety

Affected Products 12

VendorProductVersionRange
linuxlinux_kernel*≥5.2  –  <5.4.291
linuxlinux_kernel*≥5.5  –  <5.10.235
linuxlinux_kernel*≥5.11  –  <5.15.179
linuxlinux_kernel*≥5.16  –  <6.1.131
linuxlinux_kernel*≥6.2  –  <6.6.83
linuxlinux_kernel*≥6.7  –  <6.12.19
linuxlinux_kernel*≥6.13  –  <6.13.7
linuxlinux_kernel6.14any
linuxlinux_kernel6.14any
linuxlinux_kernel6.14any
linuxlinux_kernel6.14any
linuxlinux_kernel6.14any

References 10

  • git.kernel.org https://git.kernel.org/stable/c/38f0d398b6d7640d223db69df022c4a232f24774
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/47616b82f2d42ea2060334746fed9a2988d845c9
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/59cdda202829d1d6a095d233386870a59aff986f
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/88ed69f924638c7503644e1f8eed1e976f3ffa7a
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/b02f8d5a71c8571ccf77f285737c566db73ef5e5
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/c0e626f2b2390472afac52dfe72b29daf9ed8e1d
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/e0dc2c1bef722cbf16ae557690861e5f91208129
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/f265e6031d0bc4fc40c4619cb42466722b46eaa9
    Patch
  • lists.debian.org https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html
  • lists.debian.org https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/38f0d398b6d7640d223db69df022c4a232f24774
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/47616b82f2d42ea2060334746fed9a2988d845c9
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/59cdda202829d1d6a095d233386870a59aff986f
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/88ed69f924638c7503644e1f8eed1e976f3ffa7a
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/b02f8d5a71c8571ccf77f285737c566db73ef5e5
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/c0e626f2b2390472afac52dfe72b29daf9ed8e1d
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/e0dc2c1bef722cbf16ae557690861e5f91208129
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/f265e6031d0bc4fc40c4619cb42466722b46eaa9
    Patch