In the Linux kernel, the following vulnerability has been resolved:
wifi: zd1211rw: Fix potential NULL pointer dereference in zd_mac_tx_to_dev()
There is a potential NULL pointer dereference in zd_mac_tx_to_dev(). For example, the following is possible:
T0 T1 zd_mac_tx_to_dev() /* len == skb_queue_len(q) */ while (len > ZD_MAC_MAX_ACK_WAITERS) {
filter_ack() spin_lock_irqsave(&q->lock, flags); /* position == skb_queue_len(q) */ for (i=1; i<position; i++) skb = __skb_dequeue(q)
if (mac->type == NL80211_IFTYPE_AP) skb = __skb_dequeue(q); spin_unlock_irqrestore(&q->lock, flags);
skb_dequeue() -> NULL
Since there is a small gap between checking skb queue length and skb being unconditionally dequeued in zd_mac_tx_to_dev(), skb_dequeue() can return NULL. Then the pointer is passed to zd_mac_tx_status() where it is dereferenced.
In order to avoid potential NULL pointer dereference due to situations like above, check if skb is not NULL before passing it to zd_mac_tx_status().
Found by Linux Verification Center (linuxtesting.org) with SVACE.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Aug 18, 2025 | Aug 18, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 14, 2025 | Aug 16, 2025 |
| Suse | — | Upgrade dtb-amazonUpgrade kernel-source-vanillaUpgrade kernel-source-rtUpgrade kernel-syms-rtUpgrade kernel-obs-buildUpgrade ocfs2-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade dtb-amdUpgrade dtb-apmUpgrade kselftests-kmp-defaultUpgrade dtb-socionextUpgrade kernel-default-extraUpgrade dtb-hisiliconUpgrade kernel-64kb-optionalUpgrade dtb-broadcomUpgrade dlm-kmp-defaultUpgrade dlm-kmp-rtUpgrade kernel-64kb-extraUpgrade dtb-amlogicUpgrade kernel-default-manUpgrade kernel-rt_debugUpgrade kernel-64kbUpgrade kernel-rt-optionalUpgrade gfs2-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kernel-azure-vdsoUpgrade kernel-default-develUpgrade dtb-freescaleUpgrade kernel-azureUpgrade kernel-debug-vdsoUpgrade ocfs2-kmp-rtUpgrade kernel-default-baseUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt_debug-vdsoUpgrade reiserfs-kmp-defaultUpgrade dtb-appleUpgrade cluster-md-kmp-64kbUpgrade dtb-marvellUpgrade kernel-rt_debug-develUpgrade dtb-sprdUpgrade kselftests-kmp-azureUpgrade kernel-azure-extraUpgrade kernel-kvmsmallUpgrade kernel-rt-vdsoUpgrade reiserfs-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade kernel-docs-htmlUpgrade dtb-renesasUpgrade kernel-macrosUpgrade kernel-obs-qaUpgrade kernel-docsUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-default-livepatchUpgrade kernel-rt-extraUpgrade kernel-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-azureUpgrade dtb-rockchipUpgrade kernel-rt-develUpgrade kernel-zfcpdumpUpgrade kernel-devel-rtUpgrade dtb-nvidiaUpgrade dtb-lgUpgrade dtb-caviumUpgrade dtb-alteraUpgrade kernel-syms-azureUpgrade dtb-armUpgrade kernel-azure-develUpgrade gfs2-kmp-rtUpgrade cluster-md-kmp-azureUpgrade kernel-devel-azureUpgrade kernel-rtUpgrade kernel-64kb-develUpgrade gfs2-kmp-azureUpgrade kernel-default-vdsoUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kernel-develUpgrade kernel-default-base-rebuildUpgrade ocfs2-kmp-azureUpgrade dtb-qcomUpgrade dtb-exynosUpgrade gfs2-kmp-defaultUpgrade dtb-xilinxUpgrade kselftests-kmp-64kbUpgrade kernel-symsUpgrade kernel-kvmsmall-develUpgrade dlm-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-sourceUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-defaultUpgrade dtb-mediatekUpgrade dtb-allwinnerUpgrade kernel-default-optional | Dec 5, 2025 | Sep 12, 2025 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1087-nvidiaUpgrade linux-image-6.14.0-1017-aws-64kUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-fipsUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-64k-5.15Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-gkeUpgrade linux-image-gcp-fipsUpgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-1087-nvidia-lowlatencyUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-oem-24.04Upgrade linux-image-azure-fips-5.15Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-gcp-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-22.04dUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-oracle-5.15Upgrade linux-image-generic-5.15Upgrade linux-image-intelUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-5.15.0-1034-nvidia-tegra-igx-rtUpgrade linux-image-6.14.0-1017-awsUpgrade linux-image-virtual-6.8Upgrade linux-image-6.14.0-1017-azureUpgrade linux-image-lowlatency-5.15Upgrade linux-image-raspiUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.14.0-1020-gcpUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-aws-fips-5.15Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gke-5.15Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-5.15.0-1089-gkeUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1045-nvidia-tegraUpgrade linux-image-6.14.0-1016-realtimeUpgrade linux-image-lowlatency-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1092-gcp-fipsUpgrade linux-image-generic-64kUpgrade linux-image-gke-64kUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-aws-fipsUpgrade linux-image-oracle-6.14Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-5.15.0-1092-aws-64kUpgrade linux-image-kvm-5.15Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-gkeop-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-aws-5.15Upgrade linux-image-aws-64k-5.15Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-gkeop-5.15Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-oem-6.14Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-gkeopUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-realtime-6.14Upgrade linux-image-raspi-nolpaeUpgrade linux-image-oem-22.04aUpgrade linux-image-azure-6.14Upgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1096-azureUpgrade linux-image-5.15.0-1092-gcpUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-nvidia-tegraUpgrade linux-image-6.14.0-1017-oracle-64kUpgrade linux-image-ibm-5.15Upgrade linux-image-nvidiaUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1090-oracleUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-5.15.0-1045-nvidia-tegra-rtUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-1086-raspiUpgrade linux-image-generic-64k-6.14Upgrade linux-image-5.15.0-1092-realtimeUpgrade linux-image-5.15.0-1088-kvmUpgrade linux-image-5.15.0-1085-intel-iot-realtimeUpgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-156-generic-lpaeUpgrade linux-image-realtime-6.8.1Upgrade linux-image-raspi-5.15Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-5.15.0-156-genericUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-6.14.0-1020-gcp-64kUpgrade linux-image-6.14.0-1017-oracleUpgrade linux-image-5.15.0-1087-intel-iotgUpgrade linux-image-5.15.0-1034-nvidia-tegra-igxUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1056-xilinx-zynqmpUpgrade linux-image-oem-22.04cUpgrade linux-image-ibmUpgrade linux-image-xilinxUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-virtual-6.14Upgrade linux-image-oracle-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-raspi-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-awsUpgrade linux-image-realtime-5.15Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-5.15.0-1092-aws-fipsUpgrade linux-image-5.15.0-156-generic-64kUpgrade linux-image-oracle-6.8Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-azure-fipsUpgrade linux-image-5.15.0-156-lowlatencyUpgrade linux-image-6.14.0-36-generic-64kUpgrade linux-image-azure-6.8Upgrade linux-image-realtimeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-aws-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-fips-6.8Upgrade linux-image-aws-lts-22.04Upgrade linux-image-aws-64kUpgrade linux-image-5.15.0-156-lowlatency-64kUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-gcp-6.14Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-azure-lts-24.04Upgrade linux-image-aws-6.14Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.14.0-36-genericUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-azureUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-fips-5.15Upgrade linux-image-6.14.0-1016-oemUpgrade linux-image-6.14.0-1018-raspiUpgrade linux-image-virtualUpgrade linux-image-xilinx-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-gke-64k-6.8Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-gcp-5.15Upgrade linux-image-aws-64k-6.14Upgrade linux-image-generic-64k-6.8Upgrade linux-image-oem-24.04aUpgrade linux-image-generic-6.14Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-azure-5.15Upgrade linux-image-5.15.0-1092-awsUpgrade linux-image-5.15.0-1075-gkeopUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-gke-6.8Upgrade linux-image-gcpUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-raspi-6.14Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-virtual-5.15Upgrade linux-image-generic-6.8Upgrade linux-image-azure-cvmUpgrade linux-image-aws-lts-24.04Upgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-5.15.0-1096-azure-fipsUpgrade linux-image-5.15.0-156-fipsUpgrade linux-image-5.15.0-1086-ibmUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-5.15 | Sep 26, 2025 | Aug 16, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 9, 2025 | Aug 16, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub