CVE-2025-71229
kernel: wifi: rtw88: Fix alignment fault in rtw_core_enable_beacon()
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · February 18, 2026
Updated · June 28, 2026
Description
An alignment fault flaw was found in the Linux kernel's rtw88 WiFi driver. The rtw_core_enable_beacon() function performs a 4-byte read from a memory address that is not 4-byte aligned. On architectures with strict alignment requirements (such as arm64), this causes a data abort exception and kernel crash when the WiFi driver processes beacon-related firmware commands.
Statement
This vulnerability affects systems using Realtek rtw88-based WiFi adapters (such as RTL8822CE) on architectures with strict memory alignment requirements. x86 systems are generally unaffected due to hardware support for unaligned memory access. The crash occurs during normal WiFi operations involving channel scanning or beacon processing.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
To mitigate this issue, prevent the rtw88_core module from being loaded. See https://access.redhat.com/solutions/41278 for instructions on how to blacklist kernel modules.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-805 · Buffer Access with Incorrect Length Value