CVE-2025-40321 — NULL Pointer Dereference in Linux
Severity
7.8HIGHOSV
OSV3.2
No vectorEPSS
0.1%
top 81.57%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 8
Latest updateApr 13
Description
In the Linux kernel, the following vulnerability has been resolved:
wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode
Currently, whenever there is a need to transmit an Action frame,
the brcmfmac driver always uses the P2P vif to send the "actframe" IOVAR to
firmware. The P2P interfaces were available when wpa_supplicant is managing
the wlan interface.
However, the P2P interfaces are not created/initialized when only hostapd
is managing the wlan interface. And if hos…
Affected Packages7 packages
▶CVEListV5linux/linux18e2f61db3b708e0a22ccc403cb6ab2203d6faab — c863b9c7b4e9af0b7931cb791ec91971a50f1a25+8