CVE-2025-21979

CVE-2025-21979 affects the Linux kernel wifi stack (cfg80211). A wiphy_work can be queued as soon as the wiphy is allocated (wiphy_new_nm). If wiphy_free runs before the rdev::wiphy_work executes, the wiphy memory is freed and later accessed, leading to a use-after-free. The fix is to cancel the ...