CVE-2025-21979

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: cancel wiphy_work before freeing wiphy A wiphy_work can be queued from the moment the wiphy is allocated and initialized (i.e. wiphy_new_nm). When a wiphy_work is queued, the rdev::wiphy_work is getting queued. If wiphy_free is called before the rdev::wiphy_work had a chance to run, the wiphy memory will be freed, and then when it eventally gets to run it'll use invalid memory. Fix this by canceling the work before freeing the wiphy.

• CWE-416
• CWE-416

• https://git.kernel.org/stable/c/0272d4af7f92997541d8bbf4c51918b93ded6ee2Patch
• https://git.kernel.org/stable/c/72d520476a2fab6f3489e8388ab524985d6c4b90Patch
• https://git.kernel.org/stable/c/75d262ad3c36d52852d764588fcd887f0fcd9138Patch
• https://git.kernel.org/stable/c/8930a3e1568cf534f86c8ed2def817c6d0528fc1Patch
• https://git.kernel.org/stable/c/a5158d67bff06cb6fea31be39aeb319fd908ed8ePatch
• https://git.kernel.org/stable/c/dea22de162058216a90f2706f0d0b36f0ff309fdPatch
• https://lists.debian.org/debian-lts-announce/2025/05/msg00045.htmlPatch

Published

Apr 1, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-21973In the Linux kernel, the following vulnerability has been re…7.1
• CVE-2025-21974In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-21975In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-21976In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-21977In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-21978In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-2198Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2025-21980In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-21981In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-21982In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-21983In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2025-21984In the Linux kernel, the following vulnerability has been re…4.7