CVE-2025-21910 — Improper Input Validation in Linux
Severity
5.5MEDIUMNVD
OSV8.8OSV7.8OSV7.1OSV5.9OSV4.7
EPSS
0.1%
top 71.16%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedApr 1
Latest updateOct 15
Description
In the Linux kernel, the following vulnerability has been resolved:
wifi: cfg80211: regulatory: improve invalid hints checking
Syzbot keeps reporting an issue [1] that occurs when erroneous symbols
sent from userspace get through into user_alpha2[] via
regulatory_hint_user() call. Such invalid regulatory hints should be
rejected.
While a sanity check from commit 47caf685a685 ("cfg80211: regulatory:
reject invalid hints") looks to be enough to deter these very cases,
there is a way to get arou…
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6
Affected Packages6 packages
▶CVEListV5linux/linux09d989d179d0c679043556dda77c51b41a2dae7e — 62b1a9bbfebba4b4c2bb6c1ede9ef7ecee7a9ff6+8