Login Sign Up

CVE-2025-71234

N/A Unknown

📋 TL;DR

A Linux kernel vulnerability in the rtl8xxxu WiFi driver allows out-of-bounds memory writes when adding stations. This can lead to kernel memory corruption, potentially causing system crashes or arbitrary code execution. Affected systems are those using RTL8192EU WiFi adapters with vulnerable kernel versions.

💻 Affected Systems

Products:
  • Linux kernel rtl8xxxu driver
Versions: Kernel versions containing the vulnerable driver code before fix commits
Operating Systems: Linux
Default Config Vulnerable: ⚠️ Yes
Notes: Requires RTL8192EU WiFi adapter or compatible hardware using rtl8xxxu driver.

⚠️ Manual Verification Required

This CVE does not have specific version information in our database, so automatic vulnerability detection cannot determine if your system is affected.

Why? The CVE database entry doesn't specify which versions are vulnerable (no version ranges provided by the vendor/NVD).

🔒 Custom verification scripts are available for registered users. Sign up free to download automated test scripts.

Recommended Actions:
  1. Review the CVE details at NVD
  2. Check vendor security advisories for your specific version
  3. Test if the vulnerability is exploitable in your environment
  4. Consider updating to the latest version as a precaution

⚠️ Risk & Real-World Impact

🔴

Worst Case

Kernel memory corruption leading to system crash, denial of service, or potential arbitrary code execution with kernel privileges.

🟠

Likely Case

System instability, kernel panics, or crashes when WiFi stations connect to affected adapters.

🟢

If Mitigated

No impact if patched or if vulnerable driver not loaded.

🌐 Internet-Facing: LOW - Requires local network access and specific hardware.
🏢 Internal Only: MEDIUM - Internal attackers with network access could potentially trigger the vulnerability on affected systems.

🎯 Exploit Status

Public PoC: ✅ No
Weaponized: UNKNOWN
Unauthenticated Exploit: ✅ No
Complexity: HIGH

Exploitation requires specific hardware and driver loading conditions.

🛠️ Fix & Mitigation

✅ Official Fix

Patch Version: Kernel versions with commits 116f7bd8160c6b37d1c6939385abf90f6f6ed2f5, 5d810ba377eddee95d30766d360a14efbb3d1872, or 9a0f3fa6ecd0c9c32dbc367a57482bbf7c7d25bf

Vendor Advisory: https://git.kernel.org/stable/c/116f7bd8160c6b37d1c6939385abf90f6f6ed2f5

Restart Required: Yes

Instructions:

1. Update Linux kernel to patched version. 2. Rebuild kernel if using custom build. 3. Reboot system to load new kernel.

🔧 Temporary Workarounds

Disable rtl8xxxu driver

linux

Prevent loading of vulnerable driver module

echo 'blacklist rtl8xxxu' >> /etc/modprobe.d/blacklist.conf
rmmod rtl8xxxu

Use alternative WiFi adapter

all

Replace RTL8192EU adapter with different chipset

🧯 If You Can't Patch

  • Disable WiFi functionality on affected systems
  • Restrict network access to prevent station connections

🔍 How to Verify

Check if Vulnerable:

Check if rtl8xxxu driver is loaded: lsmod | grep rtl8xxxu

Check Version:

uname -r

Verify Fix Applied:

Check kernel version includes fix commits or driver version

📡 Detection & Monitoring

Log Indicators:

  • Kernel panic messages
  • KASAN reports of slab-out-of-bounds
  • WiFi connection failures

Network Indicators:

  • Unusual WiFi disconnections
  • Failed station associations

SIEM Query:

kernel: *KASAN* OR kernel: *slab-out-of-bounds* OR kernel: *rtl8xxxu*

📊 Metadata

CVE ID: CVE-2025-71234
CVSS v3 Score: N/A (Unknown)
Published: February 18, 2026
Last Updated: February 23, 2026

🔗 References

📤 Share & Export

📄 Export Markdown 📋 Export JSON