01 Record

CVE-2025-21909

wifi: nl80211: reject cooked mode if it is set along with other flags

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

wifi: nl80211: reject cooked mode if it is set along with other flags

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.17% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 6.2% of scored records. A rank, not a probability.
NVD base score: 5.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-06-17.
Red Hat severity: Low. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-04-01 15:40Z1 YR AGO

Last updated

2026-05-11 21:08Z3 MO AGO

Reserved

2024-12-29

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')Class

Data version

5.2

Document digest

66f74d07c3758607ec6168bc5c0a21165ff4fe6f11ce612045937e00993ef773

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux66f7ac50ed7cc5c19a62bc97e8f6e7891004a03a to < 5ea856d93794c4afa5542defd8c61f2708dc245a, 66f7ac50ed7cc5c19a62bc97e8f6e7891004a03a to < 351eb7ac53ff1cd94d893c0c4534ced2f36ae7d7, 66f7ac50ed7cc5c19a62bc97e8f6e7891004a03a to < cd1bdcb77fdc03c253137e55bae10551b3481461, 66f7ac50ed7cc5c19a62bc97e8f6e7891004a03a to < 236f41ca728f23210b31ed2d1d8a6df575a4b2d6, 66f7ac50ed7cc5c19a62bc97e8f6e7891004a03a to < ebebbb0eded2ed9a1abfa31962f6fb699e6abce7, 66f7ac50ed7cc5c19a62bc97e8f6e7891004a03a to < 521e55c2b0d6028861ac0a2d06aa57bb0e3ac486, 66f7ac50ed7cc5c19a62bc97e8f6e7891004a03a to < ac4860141300581d3e2f6c6dafa37220f7ea9f65, 66f7ac50ed7cc5c19a62bc97e8f6e7891004a03a to < 49f27f29446a5bfe633dd2cc0cfebd48a1a5e77f, 2.6.26—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/5ea856d93794c4afa5542defd8c61f2708dc245a
git.kernel.orghttps://git.kernel.org/stable/c/351eb7ac53ff1cd94d893c0c4534ced2f36ae7d7
git.kernel.orghttps://git.kernel.org/stable/c/cd1bdcb77fdc03c253137e55bae10551b3481461
git.kernel.orghttps://git.kernel.org/stable/c/236f41ca728f23210b31ed2d1d8a6df575a4b2d6
git.kernel.orghttps://git.kernel.org/stable/c/ebebbb0eded2ed9a1abfa31962f6fb699e6abce7
git.kernel.orghttps://git.kernel.org/stable/c/521e55c2b0d6028861ac0a2d06aa57bb0e3ac486
git.kernel.orghttps://git.kernel.org/stable/c/ac4860141300581d3e2f6c6dafa37220f7ea9f65
git.kernel.orghttps://git.kernel.org/stable/c/49f27f29446a5bfe633dd2cc0cfebd48a1a5e77f
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/05/msg00045.html
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/05/msg00030.html

01 Record index

CVE-2025-21909

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2025-21909

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References