CVE-2025-21979

In the Linux kernel, the following vulnerability has been resolved:

wifi: cfg80211: cancel wiphy_work before freeing wiphy

A wiphy_work can be queued from the moment the wiphy is allocated and initialized (i.e. wiphy_new_nm). When a wiphy_work is queued, the rdev::wiphy_work is getting queued.

If wiphy_free is called before the rdev::wiphy_work had a chance to run, the wiphy memory will be freed, and then when it eventally gets to run it'll use invalid memory.

Fix this by canceling the work before freeing the wiphy.

This vulnerability is rated as Moderate because exploitation requires local access and interaction with the wireless networking subsystem, substantially limiting exposure. In typical Red Hat Enterprise Linux server environments, wireless interfaces and drivers are not utilized or present by default. An attacker must have local access and the ability to trigger wireless interface registration or teardown to induce the race condition and cause a denial of service (system crash) or memory corruption.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.