linux-cve-announce - CVE-2025-71222: wifi: wlcore: ensure skb headroom before skb

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <2026021426-CVE-2025-71222-1437@gregkh>
Date: Sat, 14 Feb 2026 17:28:28 +0100
From: Greg Kroah-Hartman <gregkh@...uxfoundation.org>
To: linux-cve-announce@...r.kernel.org
Cc: Greg Kroah-Hartman <gregkh@...nel.org>
Subject: CVE-2025-71222: wifi: wlcore: ensure skb headroom before skb_push

From: Greg Kroah-Hartman <gregkh@...nel.org>

Description
===========

In the Linux kernel, the following vulnerability has been resolved:

wifi: wlcore: ensure skb headroom before skb_push

This avoids occasional skb_under_panic Oops from wl1271_tx_work. In this case, headroom is
less than needed (typically 110 - 94 = 16 bytes).

The Linux kernel CVE team has assigned CVE-2025-71222 to this issue.


Affected and fixed versions
===========================

	Fixed in 5.10.250 with commit 88295a55fefe5414e64293638b6f7549646e58ed
	Fixed in 5.15.200 with commit cd89a4656c03f8db0c57350aaec69cd3cfaa3522
	Fixed in 6.1.163 with commit 745a0810dbc96a0471e5f5e627ba1e978c3116d4
	Fixed in 6.6.124 with commit b167312390fdd461c81ead516f2b0b44e83a9edb
	Fixed in 6.12.70 with commit 71de0b6e04bbee5575caf9a1e4d424e7dcc50018
	Fixed in 6.18.10 with commit 689a7980e4788e13e766763d53569fb78dea2513
	Fixed in 6.19 with commit e75665dd096819b1184087ba5718bd93beafff51

Please see https://www.kernel.org for a full list of currently supported
kernel versions by the kernel community.

Unaffected versions might change over time as fixes are backported to
older supported kernel versions.  The official CVE entry at
	https://cve.org/CVERecord/?id=CVE-2025-71222
will be updated if fixes are backported, please check that for the most
up to date information about this issue.


Affected files
==============

The file(s) affected by this issue are:
	drivers/net/wireless/ti/wlcore/tx.c


Mitigation
==========

The Linux kernel CVE team recommends that you update to the latest
stable kernel version for this, and many other bugfixes.  Individual
changes are never tested alone, but rather are part of a larger kernel
release.  Cherry-picking individual commits is not recommended or
supported by the Linux kernel community at all.  If however, updating to
the latest release is impossible, the individual changes to resolve this
issue can be found at these commits:
	https://git.kernel.org/stable/c/88295a55fefe5414e64293638b6f7549646e58ed
	https://git.kernel.org/stable/c/cd89a4656c03f8db0c57350aaec69cd3cfaa3522
	https://git.kernel.org/stable/c/745a0810dbc96a0471e5f5e627ba1e978c3116d4
	https://git.kernel.org/stable/c/b167312390fdd461c81ead516f2b0b44e83a9edb
	https://git.kernel.org/stable/c/71de0b6e04bbee5575caf9a1e4d424e7dcc50018
	https://git.kernel.org/stable/c/689a7980e4788e13e766763d53569fb78dea2513
	https://git.kernel.org/stable/c/e75665dd096819b1184087ba5718bd93beafff51