CVE-2025-68182
High
Description
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: fix potential use after free in iwl_mld_remove_link() This code frees "link" by calling kfree_rcu(link, rcu_head) and then it dereferences "link" to get the "link->fw_id". Save the "link->fw_id" first to avoid a potential use after free.
SeverityHigh
CVSS7.5
Exploit probability—
Product
Linux
PublishedDec 16, 2025
First seenDec 16, 2025
How to fix
Update
- Linux Linux5b4a239c9f94e1606435f1842fc6fd426d607dbb, 77e67d5daaf155f7d0f99f4e797c4842169ec19e or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | d1e879ec600f9b3bdd253167533959facfefb17b ≤ v < 5b4a239c9f94e1606435f1842fc6fd426d607dbb, d1e879ec600f9b3bdd253167533959facfefb17b ≤ v < 77e67d5daaf155f7d0f99f4e797c4842169ec19e, 6.15 | 5b4a239c9f94e1606435f1842fc6fd426d607dbb, 77e67d5daaf155f7d0f99f4e797c4842169ec19e |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.