Critical Vulnerability in Linux Kernel: iwlwifi ROC Session Management Flaw
Summary
DEBIAN-CVE-2025-21906: In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: clean up ROC on failure If the firmware fails to start the session protection, then we do call iwl_mvm_roc_finished() here, but that... Affects linux versions < 6.12.19-1. Fixed in 6.12.19-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, providing essential services for hardware management, process scheduling, and system security. It is widely used in various distributions, including Debian. The kernel's iwlwifi driver is responsible for managing Intel wireless network adapters, enabling connectivity and communication over Wi-Fi. This vulnerability affects the iwlwifi driver, specifically in the management of the 'Remain On Channel' (ROC) feature, which is crucial for maintaining stable wireless connections.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the iwlwifi driver related to the management of ROC sessions. When the firmware fails to start the session protection, the function iwl_mvm_roc_finished() is called, but it does not properly handle the state of the ROC session. The status flag IWL_MVM_STATUS_ROC_P2P_RUNNING is not set in the failure or stop path, leading to potential warnings during subsequent channel activations. This oversight can result in system instability and unexpected behavior in wireless communications.
How To Fix
Minimum fixed version
6.12.19-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. The best course of action is to apply the patch by updating to the fixed version of the Linux kernel.
Conclusion
The vulnerability in the Linux kernel's iwlwifi driver poses a risk to system stability and wireless communication. It is crucial for users to update their systems to the patched version to mitigate these risks. Utilizing tools like Vulert can help monitor for such vulnerabilities in real-time.
See every vulnerability recorded for linux →
FAQ
The vulnerability can lead to system instability and unexpected behavior in wireless communications, particularly when managing ROC sessions.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected.
Yes, the patched version of the Linux kernel is 6.12.19-1 for both Debian 13 and 14.
While there are no specific workarounds, it is recommended to prioritize updating your kernel to the patched version as soon as possible.
Detailed information can be found in the Debian CVE database at https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2025-21906.json.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
