CVE-2025-38644

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The Linux kernel contains an issue where TDLS (Tunnel Direct Link Setup) operations were not properly rejected when a station was not associated. Specifically, a warning occurred in the ieee80211 tdls oper() function when attempting to enable a TDLS link immediately after a connection attempt, before association was complete and without prior TDLS setup. This resulted in uninitialized internal state, specifically sdata->u.mgd.tdls peer, leading to a warning in code paths that expected it to be valid. The issue was identified through testing with syzbot.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.