CVE-2025-38644

wifi: mac80211: reject TDLS operations when station is not associated

References

Notes

 carnil> Introduced in 81dd2b882241 ("mac80211: move TDLS data to mgd private part").
 carnil> Vulnerable versions: 3.17.

Bugs

Status

Branch Status
upstream released (6.17-rc1) [16ecdab5446f15a61ec88eb0d23d25d009821db0]
6.18-upstream-stable N/A "Fixed before branching point"
6.17-upstream-stable N/A "Fixed before branching point"
6.16-upstream-stable released (6.16.1) [31af06b574394530f68a4310c45ecbe2f68853c4]
6.15-upstream-stable released (6.15.10) [4df663d4c1ca386dcab2f743dfc9f0cc07aef73c]
6.12-upstream-stable released (6.12.42) [af72badd5ee423eb16f6ad7fe0a62f1b4252d848]
6.6-upstream-stable released (6.6.102) [378ae9ccaea3f445838a087962a067b5cb2e8577]
6.1-upstream-stable released (6.1.148) [0c84204cf0bbe89e454a5caccc6a908bc7db1542]
5.10-upstream-stable needed
sid released (6.16.3-1)
6.12-trixie-security released (6.12.43-1)
6.1-bookworm-security released (6.1.148-1)
5.10-bullseye-security needed