CVE-2025-71222

A flaw was found in the Linux kernel's wifi: wlcore component. A local attacker with low privileges could exploit a vulnerability related to insufficient skb (socket buffer) headroom before a skb_push operation within the wl1271_tx_work function. This could lead to an skb_under_panic (kernel panic), resulting in a denial of service for the system.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

For affected Red Hat Enterprise Linux 6 ELS systems, if the wlcore Wi-Fi driver is not required, it can be prevented from loading by blacklisting the module. Create a file /etc/modprobe.d/blacklist-wlcore.conf with the content blacklist wlcore. A system reboot is required for this change to take effect. This mitigation will disable functionality provided by the wlcore driver.