Описание
In the Linux kernel, the following vulnerability has been resolved:
wifi: iwlwifi: mvm: don't leak a link on AP removal
Release the link mapping resource in AP removal. This impacted devices
that do not support the MLD API (9260 and down).
On those devices, we couldn't start the AP again after the AP has been
already started and stopped.
A flaw was found in the Linux kernel's iwlwifi wireless driver. The driver fails to properly release link mapping resources when an Access Point (AP) is removed or stopped. A local privileged user could exploit this flaw by stopping a wireless AP, leading to a Denial of Service (DoS) condition where the device cannot restart the access point without reloading the driver or rebooting the system.
Меры по смягчению последствий
To mitigate this issue, prevent the affected Intel Wi-Fi driver module from loading if wireless access point functionality or Intel wireless networking is not required.
- Blacklist the kernel module by creating a configuration file:
echo "install iwlmvm /bin/true" >> /etc/modprobe.d/disable-iwlmvm.conf
- Unload the module if it is currently active:
modprobe -r iwlmvm
Warning: Modifying kernel module configurations requires a system restart or unloading the active driver to take effect. Caveat: Disabling the iwlmvm driver disables wireless networking for Intel Wi-Fi adapters driven by this module.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 6 | kernel | Not affected | ||
| Red Hat Enterprise Linux 7 | kernel | Out of support scope | ||
| Red Hat Enterprise Linux 7 | kernel-rt | Out of support scope | ||
| Red Hat Enterprise Linux 8 | kernel | Not affected | ||
| Red Hat Enterprise Linux 8 | kernel-rt | Not affected | ||
| Red Hat Enterprise Linux 9 | kernel | Fixed | RHSA-2025:6966 | 13.05.2025 |
| Red Hat Enterprise Linux 9 | kernel | Fixed | RHSA-2025:6966 | 13.05.2025 |
Показывать по
Дополнительная информация
Статус:
EPSS
4.4 Medium
CVSS3
Связанные уязвимости
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: don't leak a link on AP removal Release the link mapping resource in AP removal. This impacted devices that do not support the MLD API (9260 and down). On those devices, we couldn't start the AP again after the AP has been already started and stopped.
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: don't leak a link on AP removal Release the link mapping resource in AP removal. This impacted devices that do not support the MLD API (9260 and down). On those devices, we couldn't start the AP again after the AP has been already started and stopped.
In the Linux kernel, the following vulnerability has been resolved: w ...
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: don't leak a link on AP removal Release the link mapping resource in AP removal. This impacted devices that do not support the MLD API (9260 and down). On those devices, we couldn't start the AP again after the AP has been already started and stopped.
Уязвимость функции iwl_mvm_mac_remove_interface() модуля drivers/net/wireless/intel/iwlwifi/mvm/mac80211.c - драйвера поддержки адаптеров беспроводной связи Intel ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании
EPSS
4.4 Medium
CVSS3