Bug 2356613 (CVE-2025-21905) - CVE-2025-21905 kernel: wifi: iwlwifi: limit printed string from FW file
Summary: CVE-2025-21905 kernel: wifi: iwlwifi: limit printed string from FW file
Keywords:
Status: NEW
Alias: CVE-2025-21905
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2025-04-01 16:02 UTC by OSIDB Bzimport
Modified: 2025-06-23 10:58 UTC (History)
4 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:


Attachments (Terms of Use)

Description OSIDB Bzimport 2025-04-01 16:02:33 UTC
In the Linux kernel, the following vulnerability has been resolved:

wifi: iwlwifi: limit printed string from FW file

There's no guarantee here that the file is always with a
NUL-termination, so reading the string may read beyond the
end of the TLV. If that's the last TLV in the file, it can
perhaps even read beyond the end of the file buffer.

Fix that by limiting the print format to the size of the
buffer we have.


Note You need to log in before you can comment on or make changes to this bug.