Cloud Vulnerability DB
An open project to list all known cloud vulnerabilities and Cloud Service Provider security issues
Vulnerability DatabaseCVE-2025-21730
CVE-2025-21730:
Linux Debian vulnerability analysis and mitigation
Overview
CVE-2025-21730 affects the Linux kernel's rtw89 WiFi driver. The vulnerability was discovered when a list corruption issue occurs during WoWLAN (Wake-on-WLAN) failure in the resume flow. The issue affects systems using the Realtek rtw89 wireless network driver (CVE Mitre).
Technical details
The vulnerability stems from a double initialization of the mgntentry list when WoWLAN fails during resume flow. When rtw89opsaddinterface() is triggered without first removing the interface, the mgntentry list is initialized again. This causes the listempty() check in rtw89chanctxopsassignvif() to become ineffective, leading to an invalid listaddtail() operation. The issue manifests as a kernel BUG at lib/list_debug.c:34 with list corruption errors (Kernel Git).
Impact
The vulnerability can result in kernel crashes due to list corruption, potentially affecting system stability and causing denial of service conditions. The issue specifically impacts systems using the rtw89 wireless driver during WoWLAN resume operations (CVE Mitre).
Mitigation and workarounds
A fix has been implemented by adding a check to prevent double adding of the list in the rtw89opsadd_interface() function. The patch modifies the driver to properly handle the list initialization only when the interface is not already in the list (Kernel Git).
Additional resources
Source: This report was generated using AI
Free Vulnerability Assessment
Benchmark your Cloud Security Posture
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
Ready to see Wiz in action?
“Best User Experience I have ever seen, provides full visibility to cloud workloads.”
David EstlickCISO
“Wiz provides a single pane of glass to see what is going on in our cloud environments.”
Adam FletcherChief Security Officer
“We know that if Wiz identifies something as critical, it actually is.”
Greg PoniatowskiHead of Threat and Vulnerability Management