Critical Vulnerability in Linux Kernel: Memory Management Flaw in mac80211
Summary
DEBIAN-CVE-2025-21828: In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't flush non-uploaded STAs If STA state is pre-moved to AUTHORIZED (such as in IBSS scenarios) and insertion fails, the station is fr... Affects linux versions < 6.12.13-1. Fixed in 6.12.13-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Linux operating system, responsible for managing hardware resources and providing essential services to software applications. It supports a wide range of functionalities, including process management, memory management, and device control. The kernel is highly modular and can be customized for various distributions, including Debian. This vulnerability specifically affects the mac80211 subsystem, which handles wireless networking, making it crucial for systems relying on Wi-Fi connectivity.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified within the mac80211 subsystem related to the management of station (STA) states. When a station's state is prematurely moved to AUTHORIZED, and the insertion fails, the station is freed without the driver's knowledge. This unexpected behavior can lead to crashes when the driver attempts to flush the station. The flaw arises from improper checks on whether the station was uploaded to the driver, potentially leading to system instability and security risks.
How To Fix
Minimum fixed version
6.12.13-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, no specific workarounds are mentioned for this vulnerability. The best course of action is to apply the patch by updating the kernel as described above.
Conclusion
The identified vulnerability in the Linux kernel's mac80211 subsystem poses significant risks to system stability and security, particularly for wireless networking. Users are strongly advised to update their kernel to the patched version to mitigate these risks. Regular monitoring for vulnerabilities using tools like Vulert can help maintain system integrity.
See every vulnerability recorded for linux →
FAQ
The vulnerability can lead to system crashes and instability, particularly in environments using wireless networking.
You can use tools like Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check your application without any signup.
While this vulnerability is noted in Debian, it may affect other distributions using the same kernel version. Always check your specific distribution's advisories.
If an immediate update is not possible, consider isolating affected systems from critical networks to minimize risk until a patch can be applied.
Detailed information can be found in the Debian security advisories and the official Linux kernel documentation.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
