Skip to content
Heist/ feed
Back to feed
UnratedFix available

wifi: mac80211: ocb: skip rx_no_sta when interface is not joined

Type: advisorySources: OSV

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: ocb: skip rx_no_sta when interface is not joined ieee80211_ocb_rx_no_sta() assumes a valid channel context, which is only present after JOIN_OCB. RX may run before JOIN_OCB is executed, in which case the OCB interface is not operational. Skip RX peer handling when the interface is not joined to avoid warnings in the RX path.

Products
Kernel
Affected versions
Not specified
Fixed versions
5.10.250, 5.15.200, 6.1.163, 6.12.70, 6.18.10, 6.6.124
CVEs
CVE-2025-71224
Confirmed fixed CVEs
Not specified
Updated in this feed
5 Nov 2026, 03:04 UTC · Revision 1

Source evidence

wifi: mac80211: ocb: skip rx_no_sta when interface is not joined

core-osv · Original source

Published 14 Feb 2026, 16:27 UTC

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: ocb: skip rx_no_sta when interface is not joined ieee80211_ocb_rx_no_sta() assumes a valid channel context, which is only present after JOIN_OCB. RX may run before JOIN_OCB is executed, in which case the OCB interface is not operational. Skip RX peer handling when the interface is not joined to avoid warnings in the RX path.

osv:CVE-2025-71224

Kernel

Fixed versions: 5.10.250, 5.15.200, 6.1.163, 6.6.124, 6.12.70, 6.18.10

Complete source record
{
  "id": "8110e3390c6dce44f1968a3b3c96e10a362da66356e289c4ead6339ba04b2526",
  "url": "https://osv.dev/vulnerability/CVE-2025-71224",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "wifi: mac80211: ocb: skip rx_no_sta when interface is not joined",
    "summary": "In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: ocb: skip rx_no_sta when interface is not joined ieee80211_ocb_rx_no_sta() assumes a valid channel context, which is only present after JOIN_OCB. RX may run before JOIN_OCB is executed, in which case the OCB interface is not operational. Skip RX peer handling when the interface is not joined to avoid warnings in the RX path.",
    "evidence": "osv:CVE-2025-71224",
    "products": [
      {
        "name": {
          "value": "Kernel",
          "evidence": "/affected/1/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "5.10.250",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "5.15.200",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "6.1.163",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "6.6.124",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "6.12.70",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "6.18.10",
            "evidence": "/affected/1/ranges"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "unknown",
    "structured": {
      "id": "CVE-2025-71224",
      "aliases": [
        "CVE-2025-71224"
      ],
      "affected": [
        {
          "ranges": [
            {
              "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
              "type": "GIT",
              "events": [
                {
                  "introduced": "239281f803e2efdb77d906ef296086b6917e5d71"
                },
                {
                  "fixed": "fcc768760df08337525cde28e8460e36f9855af8"
                },
                {
                  "fixed": "b04c75366a5471ae2dd7f4c33b7f1e2c08b9b32d"
                },
                {
                  "fixed": "8fd1c63e016893b7f6c1cf799410da4eaa98c090"
                },
                {
                  "fixed": "ffe1e19c3b0e5b9eb9e04fad4bce7d1dc407fd77"
                },
                {
                  "fixed": "536447521b3b9be1975c7f1db9054bdf2ab779cb"
                },
                {
                  "fixed": "e0bd226804f8e0098711042c93d64f3b720b36c0"
                },
                {
                  "fixed": "ff4071c60018a668249dc6a2df7d16330543540e"
                }
              ]
            }
          ],
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-71224.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "3.19.0"
                },
                {
                  "fixed": "5.10.250"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "5.11.0"
                },
                {
                  "fixed": "5.15.200"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "5.16.0"
                },
                {
                  "fixed": "6.1.163"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "6.2.0"
                },
                {
                  "fixed": "6.6.124"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "6.7.0"
                },
                {
                  "fixed": "6.12.70"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "6.13.0"
                },
                {
                  "fixed": "6.18.10"
                }
              ]
            }
          ],
          "package": {
            "name": "Kernel",
            "ecosystem": "Linux"
          },
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-71224.json"
          }
        }
      ],
      "modified": "2026-10-28T02:30:41.777621344Z",
      "provider": "osv",
      "references": [
        "https://git.kernel.org/stable/c/536447521b3b9be1975c7f1db9054bdf2ab779cb",
        "https://git.kernel.org/stable/c/8fd1c63e016893b7f6c1cf799410da4eaa98c090",
        "https://git.kernel.org/stable/c/b04c75366a5471ae2dd7f4c33b7f1e2c08b9b32d",
        "https://git.kernel.org/stable/c/e0bd226804f8e0098711042c93d64f3b720b36c0",
        "https://git.kernel.org/stable/c/fcc768760df08337525cde28e8460e36f9855af8",
        "https://git.kernel.org/stable/c/ff4071c60018a668249dc6a2df7d16330543540e",
        "https://git.kernel.org/stable/c/ffe1e19c3b0e5b9eb9e04fad4bce7d1dc407fd77",
        "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/71xxx/CVE-2025-71224.json",
        "https://nvd.nist.gov/vuln/detail/CVE-2025-71224",
        "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
      ],
      "provider_metadata": {
        "cna_assigner": "Linux",
        "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/71xxx/CVE-2025-71224.json"
      }
    },
    "related_cves": [
      {
        "value": "CVE-2025-71224",
        "evidence": "/id"
      }
    ],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "core-osv",
  "document_id": 509623,
  "published_at": "2026-02-14T16:27:06.752+00:00"
}