Critical Vulnerability in Linux Kernel: Double Initialization of mgnt_entry List
Summary
DEBIAN-CVE-2025-21730: In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: avoid to init mgnt_entry list twice when WoWLAN failed If WoWLAN failed in resume flow, the rtw89_ops_add_interface() triggered without rem... Affects linux versions < 6.12.13-1. Fixed in 6.12.13-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, responsible for managing hardware resources and providing essential services to software applications. It is widely used in various distributions, including Debian. This vulnerability affects the Linux kernel versions in Debian 13 and 14, specifically related to the rtw89 wireless driver, which handles Wi-Fi connectivity. The vulnerability arises from improper handling of the mgnt_entry list during the WoWLAN (Wake on WLAN) resume process, leading to potential system instability.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified where the mgnt_entry list is initialized twice if the WoWLAN process fails during resume. This results in a corrupted list, causing the list_empty() check to become ineffective and leading to further corruption when the list is manipulated. The vulnerability can lead to kernel crashes and system instability, as evidenced by the kernel BUG messages and invalid opcode errors observed during operation. The issue is traced back to the rtw89_ops_add_interface() function, which fails to properly manage the interface removal before reinitialization.
How To Fix
Minimum fixed version
6.12.13-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. It is recommended to apply the patch as soon as it is available to avoid potential issues.
Conclusion
The identified vulnerability in the Linux kernel poses significant risks to system stability and performance, particularly for users relying on Wi-Fi connectivity. It is crucial to apply the available patch to mitigate these risks and maintain a secure operating environment.
See every vulnerability recorded for linux →
FAQ
The vulnerability can lead to kernel crashes and system instability, particularly affecting Wi-Fi connectivity.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The vulnerability affects Linux kernel versions in Debian 13 and 14 prior to the patch version 6.12.13-1.
While the primary risk is system instability, it is always advisable to back up important data regularly, especially when vulnerabilities are present.
It is recommended to regularly check for updates and apply them promptly to ensure your system is secure and stable.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
