CVE-2025-21905

In the Linux kernel, the following vulnerability has been resolved:

wifi: iwlwifi: limit printed string from FW file

There's no guarantee here that the file is always with a NUL-termination, so reading the string may read beyond the end of the TLV. If that's the last TLV in the file, it can perhaps even read beyond the end of the file buffer.

Fix that by limiting the print format to the size of the buffer we have.

This vulnerability is rated as Moderate severity because exploitation requires local administrative privileges to install a crafted firmware file or physical access to the machine. In typical Red Hat Enterprise Linux server environments, wireless networking hardware is rarely deployed or enabled, significantly minimizing exposure. Furthermore, the out-of-bounds read is restricted to parsing firmware metadata during driver initialization and does not allow remote code execution.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.