{"id":"CVE-2025-71227","title":"wifi: mac80211: don't WARN for connections on invalid channels","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211: don't WARN for connections on invalid channels\n\nIt's not clear (to me) how exactly syzbot managed to hit this,\nbut it seems conceivable that e.g. regula…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= f2d9d270c15ae0139b54a7e7466d738327e97e03 < c02b1d244a5d799696ca74d3fba6539c8d76195f","Linux >= f2d9d270c15ae0139b54a7e7466d738327e97e03 < 579cf5939f8f4c4f88c75862d0c573fb13567b74","Linux >= f2d9d270c15ae0139b54a7e7466d738327e97e03 < 10d3ff7e5812c8d70300f6fa8f524009a06aa7e1","Linux >= f2d9d270c15ae0139b54a7e7466d738327e97e03 < 99067b58a408a384d2a45c105eb3dce980a862ce","Linux 3.8"],"published":"2026-02-18","updated":"2026-10-21","sourceUpdated":"2026-10-21T12:38:37.677Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2025-71227","references":[{"url":"https://git.kernel.org/stable/c/c02b1d244a5d799696ca74d3fba6539c8d76195f"},{"url":"https://git.kernel.org/stable/c/579cf5939f8f4c4f88c75862d0c573fb13567b74"},{"url":"https://git.kernel.org/stable/c/10d3ff7e5812c8d70300f6fa8f524009a06aa7e1"},{"url":"https://git.kernel.org/stable/c/99067b58a408a384d2a45c105eb3dce980a862ce"}],"tags":["cve.org"],"epss":0.00177,"epssPercentile":0.07133,"ingestedAt":"2026-10-21T12:48:53.673Z","slug":"CVE-2025-71227","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211: don't WARN for connections on invalid channels\n\nIt's not clear (to me) how exactly syzbot managed to hit this,\nbut it seems conceivable that e.g. regulatory changed and has\ndisabled a channel between scanning (channel is checked to be\nusable by cfg80211_get_ies_channel_number) and connecting on\nthe channel later.\n\nWith one scenario that isn't covered elsewhere described above,\nthe warning isn't good, replace it with a (more informative)\nerror message.\n\n## Affected\n\n- `Linux >= f2d9d270c15ae0139b54a7e7466d738327e97e03 < c02b1d244a5d799696ca74d3fba6539c8d76195f`\n- `Linux >= f2d9d270c15ae0139b54a7e7466d738327e97e03 < 579cf5939f8f4c4f88c75862d0c573fb13567b74`\n- `Linux >= f2d9d270c15ae0139b54a7e7466d738327e97e03 < 10d3ff7e5812c8d70300f6fa8f524009a06aa7e1`\n- `Linux >= f2d9d270c15ae0139b54a7e7466d738327e97e03 < 99067b58a408a384d2a45c105eb3dce980a862ce`\n- `Linux 3.8`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}