Linux Kernel mac80211 Driver Pre-RCU Removal Call Error Vulnerability

Vulnerability

A vulnerability in the Linux kernel's mac80211 wireless driver management has been addressed. The issue stemmed from improper handling of the 'drv_sta_pre_rcu_remove' calls for stations that had not been uploaded, potentially leading to data corruption by allowing uninitialized driver private data structures to cause issues. This vulnerability affects several versions of the Linux kernel.

Impact

The vulnerability could lead to data corruption by allowing uninitialized driver private data to cause issues, particularly in the context of wireless station management.

Reproduction

The vulnerability can be reproduced by creating a scenario where the 'drv_sta_pre_rcu_remove' function is called for a wireless station that has not been uploaded, allowing uninitialized private data to cause corruption.

Remediation

Users can upgrade to the latest version of the Linux kernel where this vulnerability has been fixed. Instructions for downloading the patched version are available on the official Linux kernel website.

Added: Sep 15, 2025, 5:32 PM
Updated: Sep 15, 2025, 5:32 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
5.7
remediation
7.7
relevance
0.5
threat
4.8
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.