CVE-2025-40321

A flaw was found in the Linux kernel’s Broadcom FullMAC Wi-Fi driver where, under standalone AP mode (hostapd managing the interface without a P2P virtual interface), the driver always attempts to use a P2P interface pointer that may not be initialized when transmitting certain Action frames. If an ANQP Query Request Action frame is received from an unassociated station, this uninitialized pointer is dereferenced, leading to a NULL pointer dereference and kernel crash.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.