CVE Database›Document archive›CVE-2025-71229

CVE-2025-71229

kernel: wifi: rtw88: Fix alignment fault in rtw_core_enable_beacon()

Loading…

Severity

Moderate

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · February 18, 2026

Updated · June 28, 2026

Description

An alignment fault flaw was found in the Linux kernel's rtw88 WiFi driver. The rtw_core_enable_beacon() function performs a 4-byte read from a memory address that is not 4-byte aligned. On architectures with strict alignment requirements (such as arm64), this causes a data abort exception and kernel crash when the WiFi driver processes beacon-related firmware commands.

Statement

This vulnerability affects systems using Realtek rtw88-based WiFi adapters (such as RTL8822CE) on architectures with strict memory alignment requirements. x86 systems are generally unaffected due to hardware support for unaligned memory access. The crash occurs during normal WiFi operations involving channel scanning or beacon processing.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

To mitigate this issue, prevent the rtw88_core module from being loaded. See https://access.redhat.com/solutions/41278 for instructions on how to blacklist kernel modules.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-805 · Buffer Access with Incorrect Length Value