CVE-2025-21906
Description
A flaw was found in the Linux kernel's Intel Wi-Fi driver (iwlwifi). A local user can cause a Denial of Service (DoS) by triggering wireless operations that encounter a firmware failure during session protection. Because the driver does not properly record state during this failure, remain-on-channel (ROC) session cleanup is skipped, leaving the link in an active state. Subsequent channel activation attempts encounter this uncleared state, triggering kernel warnings and disrupting wireless connectivity.
Statement
This vulnerability is rated as Low severity because exploitation requires local access, is restricted to systems equipped with Intel wireless adapters, and only causes a kernel warning and temporary loss of Wi-Fi connectivity rather than system compromise. Enterprise server deployments typically do not utilize Wi-Fi interfaces or load the relevant wireless drivers, significantly limiting exposure in standard environments. Under affected configurations, the flaw manifests only when session protection encounters an internal firmware error, preventing wider system disruption.
Common Vulnerability Scoring System (CVSS) Score Details
Info alert:Important note
CVSS scores for open source components depend on vendor-specific factors (e.g. version or build chain). Therefore, Red Hat's score and impact rating can be different from NVD and other vendors. Red Hat remains the authoritative CVE Naming Authority (CNA) source for its products and services (see Red Hat classifications).
The following CVSS metrics and score provided are preliminary and subject to review.
CVSS v3 Score Breakdown
| Red Hat | NVD | cve.org | |
|---|---|---|---|
| Base Score | 3.3 | 5.5 | 7.6 |
| Attack Vector | Local | Local | Adjacent Network |
| Attack Complexity | Low | Low | Low |
| Privileges Required | Low | Low | None |
| User Interaction | None | None | None |
| Scope | Unchanged | Unchanged | Unchanged |
| Confidentiality | None | None | Low |
| Integrity Impact | None | None | Low |
| Availability Impact | Low | High | High |
Vector
Red Hat: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
NVD: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
cve.org: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
