Review reviewHigh

CVE-2025-40000

Linux

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() There is a bug observed when rtw89_core_tx_kick_off_and_wait() tries to access already freed skb_data: BUG: KFENCE: use-after-free write in rtw89_core_tx_kick_off_and_wait drivers/net/wireless/realtek/rtw89/core.c:1110 CPU: 6 UID: 0 PID: 41377 Comm: kworker/u64:24 Not tainted 6.17.0-rc1+ #1 PREEMPT(lazy) Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS edk2-20250523-14.fc42 05/23/2025 Workqueue: events_unbound cfg80211_wiphy_work [cfg80211] Use-...

CVSS: 8.8
EPSS: -
CISA KEV: Not listed
Published: 2025.10.15

PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV

Exploit probability-

Technical severityCVSS 8.8

Vulnerability overview

Affected product and versions

Product: Linux
Affected versions: >= 1ae5ca615285d5d4f72d1de464716d85dffef19f < 895cccf639ac015f3d5f993218cf098db82ac145, >= 1ae5ca615285d5d4f72d1de464716d85dffef19f < f21f530b03b4b23448edb531a0cfea434cb76bb4, >= 1ae5ca615285d5d4f72d1de464716d85dffef19f < bdb3c41b358cf87d99e39d393e164f9e4a6088e6, >= 1ae5ca615285d5d4f72d1de464716d85dffef19f < 3e31a6bc07312b448fad3b45de578471f86f0e77, >= 6.4
Fixed versions: No verified fixed-version field is available yet

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide

1
Identify
Confirm that Linux and an affected version are present.
2
Prioritize
Combine exploitation signals with asset exposure and business criticality.
3
Remediate
Follow the vendor advisory or supported update path and preserve rollback options.
4
Verify
Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE: Not available