CVE-2025-71224 Details
Description
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: ocb: skip rx_no_sta when interface is not joined ieee80211_ocb_rx_no_sta() assumes a valid channel context, which is only present after JOIN_OCB. RX may run before JOIN_OCB is executed, in which case the OCB interface is not operational. Skip RX peer handling when the interface is not joined to avoid warnings in the RX path.
A vulnerability in the Linux kernel's mac80211 module for Operation Control Block (OCB) has been addressed. The issue arose because the function ieee80211_ocb_rx_no_sta() relied on a valid channel context, which is only available after the OCB interface has been joined. This function could be executed before the join operation, leading to an unoperational OCB interface. The vulnerability has been fixed by modifying the function to skip handling of received peers when the interface is not joined, thereby preventing warnings in the reception process.
Metrics
CVSS 4.0 Severity and Vector Strings:
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Feb 14, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/536447521b3b9be1975c7f1db9054bdf2ab779cb | kernel.org | Source CodeVendor |
| https://git.kernel.org/stable/c/8fd1c63e016893b7f6c1cf799410da4eaa98c090 | kernel.org | Source CodeVendor |
| https://git.kernel.org/stable/c/b04c75366a5471ae2dd7f4c33b7f1e2c08b9b32d | kernel.org | Source CodeVendor |
| https://git.kernel.org/stable/c/e0bd226804f8e0098711042c93d64f3b720b36c0 | kernel.org | Source CodeVendor |
| https://git.kernel.org/stable/c/fcc768760df08337525cde28e8460e36f9855af8 | kernel.org | Source CodeVendor |
| https://git.kernel.org/stable/c/ff4071c60018a668249dc6a2df7d16330543540e | kernel.org | Source CodeVendor |
| https://git.kernel.org/stable/c/ffe1e19c3b0e5b9eb9e04fad4bce7d1dc407fd77 | kernel.org | Source CodeVendor |
Weakness Enumeration
No weakness enumeration is available for this CVE.
Affected Products
| Product | Versions |
|---|---|
| Linux kernel | All versions |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| Feb 14, 2026 | New CVE Received | kernel.org |
Volerion