{"id":"CVE-2025-21906","revision":"4d01c377b6444428b527ca8e59b89948","records":[{"revision":"4d01c377b6444428b527ca8e59b89948","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2025-21906","aliases":[],"title":"wifi: iwlwifi: mvm: clean up ROC on failure","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: iwlwifi: mvm: clean up ROC on failure\n\nIf the firmware fails to start the session protection, then we\ndo call iwl_mvm_roc_finished() here, but that won't do anything\nat all because IWL_MVM_STATUS_ROC_P2P_RUNNING was never set.\nSet IWL_MVM_STATUS_ROC_P2P_RUNNING in the failure/stop path.\nIf it started successfully before, it's already set, so that\ndoesn't matter, and if it didn't start it needs to be set to\nclean up.\n\nNot doing so will lead to a WARN_ON() later on a fresh remain-\non-channel, since the link is already active when activated as\nit was never deactivated.","state":0,"publishedAt":"2025-04-01T15:40:47.059+00:00","modifiedAt":"2026-10-15T21:51:55.394+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/net/wireless/intel/iwlwifi/mvm/time-event.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"35c1bbd93c4e6969b3ac238b48a8bdff3e223ed8\",\n                            \"lessThan\": \"a88c18409b5d69f426d5acc583c053eac71756a3\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"35c1bbd93c4e6969b3ac238b48a8bdff3e223ed8\",\n                            \"lessThan\": \"d1a12fcb9051bbf38b2e5af310ffb102a0fab6f9\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"35c1bbd93c4e6969b3ac238b48a8bdff3e223ed8\",\n                            \"lessThan\": \"f9751163bffd3fe60794929829f810968c6de73d\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/net/wireless/intel/iwlwifi/mvm/time-event.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"6.9\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"6.9\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.19\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.13.7\",\n                            \"lessThanOrEqual\": \"6.13.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.14\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","score":7.6,"severity":"HIGH"}],"references":["https://git.kernel.org/stable/c/a88c18409b5d69f426d5acc583c053eac71756a3","https://git.kernel.org/stable/c/d1a12fcb9051bbf38b2e5af310ffb102a0fab6f9","https://git.kernel.org/stable/c/f9751163bffd3fe60794929829f810968c6de73d"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2025-21906","license":"CVE Program Terms of Use","key":"cve-program:CVE-2025-21906","identifiers":["CVE-2025-21906"]},"retained":false,"historicalAffected":[]}],"coverage":[]}