In the Linux kernel, the following vulnerability has been resolved:
wifi: iwlwifi: limit printed string from FW file
There's no guarantee here that the file is always with a NUL-termination, so reading the string may read beyond the end of the TLV. If that's the last TLV in the file, it can perhaps even read beyond the end of the file buffer.
Fix that by limiting the print format to the size of the buffer we have.
[
{
"id": "CVE-2025-21905-07b744f8",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"target": {
"file": "drivers/net/wireless/intel/iwlwifi/iwl-drv.c",
"function": "iwl_parse_tlv_firmware"
},
"digest": {
"function_hash": "243851540096725992810783578639224497277",
"length": 14295.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@38f0d398b6d7640d223db69df022c4a232f24774"
},
{
"id": "CVE-2025-21905-0b16b321",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"target": {
"file": "drivers/net/wireless/intel/iwlwifi/iwl-drv.c"
},
"digest": {
"line_hashes": [
"77728132076593860646282312231045771967",
"56289697680358675397114568712500082170",
"165749072633941002612030107256052669392",
"123083050505848891837320632324567749571"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b02f8d5a71c8571ccf77f285737c566db73ef5e5"
},
{
"id": "CVE-2025-21905-1a1068ad",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"target": {
"file": "drivers/net/wireless/intel/iwlwifi/iwl-drv.c",
"function": "iwl_parse_tlv_firmware"
},
"digest": {
"function_hash": "56115178585893521354098230228569006826",
"length": 15716.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@59cdda202829d1d6a095d233386870a59aff986f"
},
{
"id": "CVE-2025-21905-1c7dacf4",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"target": {
"file": "drivers/net/wireless/intel/iwlwifi/iwl-drv.c"
},
"digest": {
"line_hashes": [
"77728132076593860646282312231045771967",
"56289697680358675397114568712500082170",
"165749072633941002612030107256052669392",
"123083050505848891837320632324567749571"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@59cdda202829d1d6a095d233386870a59aff986f"
},
{
"id": "CVE-2025-21905-222f4e0b",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"target": {
"file": "drivers/net/wireless/intel/iwlwifi/iwl-drv.c"
},
"digest": {
"line_hashes": [
"77728132076593860646282312231045771967",
"56289697680358675397114568712500082170",
"165749072633941002612030107256052669392",
"123083050505848891837320632324567749571"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f265e6031d0bc4fc40c4619cb42466722b46eaa9"
},
{
"id": "CVE-2025-21905-261edaad",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"target": {
"file": "drivers/net/wireless/intel/iwlwifi/iwl-drv.c"
},
"digest": {
"line_hashes": [
"92407611644369342542058398917533557404",
"56289697680358675397114568712500082170",
"165749072633941002612030107256052669392",
"123083050505848891837320632324567749571"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c0e626f2b2390472afac52dfe72b29daf9ed8e1d"
},
{
"id": "CVE-2025-21905-2a93b036",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"target": {
"file": "drivers/net/wireless/intel/iwlwifi/iwl-drv.c",
"function": "iwl_parse_tlv_firmware"
},
"digest": {
"function_hash": "11145681154610673679490794883502698039",
"length": 15434.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@88ed69f924638c7503644e1f8eed1e976f3ffa7a"
},
{
"id": "CVE-2025-21905-42be6f29",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"target": {
"file": "drivers/net/wireless/intel/iwlwifi/iwl-drv.c",
"function": "iwl_parse_tlv_firmware"
},
"digest": {
"function_hash": "154460139398048495220503359549229880989",
"length": 14699.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c0e626f2b2390472afac52dfe72b29daf9ed8e1d"
},
{
"id": "CVE-2025-21905-6ae6bec4",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"target": {
"file": "drivers/net/wireless/intel/iwlwifi/iwl-drv.c"
},
"digest": {
"line_hashes": [
"77728132076593860646282312231045771967",
"56289697680358675397114568712500082170",
"165749072633941002612030107256052669392",
"123083050505848891837320632324567749571"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e0dc2c1bef722cbf16ae557690861e5f91208129"
},
{
"id": "CVE-2025-21905-6f9754fb",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"target": {
"file": "drivers/net/wireless/intel/iwlwifi/iwl-drv.c"
},
"digest": {
"line_hashes": [
"77728132076593860646282312231045771967",
"56289697680358675397114568712500082170",
"165749072633941002612030107256052669392",
"123083050505848891837320632324567749571"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@88ed69f924638c7503644e1f8eed1e976f3ffa7a"
},
{
"id": "CVE-2025-21905-71dc43aa",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"target": {
"file": "drivers/net/wireless/intel/iwlwifi/iwl-drv.c",
"function": "iwl_parse_tlv_firmware"
},
"digest": {
"function_hash": "31335487726738515652343727278132275762",
"length": 16132.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e0dc2c1bef722cbf16ae557690861e5f91208129"
},
{
"id": "CVE-2025-21905-75a1c7fa",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"target": {
"file": "drivers/net/wireless/intel/iwlwifi/iwl-drv.c"
},
"digest": {
"line_hashes": [
"92407611644369342542058398917533557404",
"56289697680358675397114568712500082170",
"165749072633941002612030107256052669392",
"123083050505848891837320632324567749571"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@38f0d398b6d7640d223db69df022c4a232f24774"
},
{
"id": "CVE-2025-21905-9b159f2c",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"target": {
"file": "drivers/net/wireless/intel/iwlwifi/iwl-drv.c",
"function": "iwl_parse_tlv_firmware"
},
"digest": {
"function_hash": "40812507730381323277616580152278221358",
"length": 15875.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b02f8d5a71c8571ccf77f285737c566db73ef5e5"
},
{
"id": "CVE-2025-21905-ba1bd09c",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"target": {
"file": "drivers/net/wireless/intel/iwlwifi/iwl-drv.c",
"function": "iwl_parse_tlv_firmware"
},
"digest": {
"function_hash": "56115178585893521354098230228569006826",
"length": 15716.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f265e6031d0bc4fc40c4619cb42466722b46eaa9"
},
{
"id": "CVE-2025-21905-d3e05e7e",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"target": {
"file": "drivers/net/wireless/intel/iwlwifi/iwl-drv.c",
"function": "iwl_parse_tlv_firmware"
},
"digest": {
"function_hash": "185284125398681704892182085612417347241",
"length": 15382.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@47616b82f2d42ea2060334746fed9a2988d845c9"
},
{
"id": "CVE-2025-21905-e7b91df3",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"target": {
"file": "drivers/net/wireless/intel/iwlwifi/iwl-drv.c"
},
"digest": {
"line_hashes": [
"92407611644369342542058398917533557404",
"56289697680358675397114568712500082170",
"165749072633941002612030107256052669392",
"123083050505848891837320632324567749571"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@47616b82f2d42ea2060334746fed9a2988d845c9"
}
]