Return of Wrong Status Code The advisory has been revoked - it doesn't affect any version of package kernel-64k-modules-core  (opens in a new tab)


Threat Intelligence

EPSS
0.18% (8th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-CENTOS10-KERNEL64KMODULESCORE-15311134
  • published19 Feb 2026
  • disclosed1 Jan 2025

Introduced: 1 Jan 2025

CVE-2025-71227  (opens in a new tab)
CWE-393  (opens in a new tab)

Amendment

The Centos security team deemed this advisory irrelevant for Centos:10.

NVD Description

Note: Versions mentioned in the description apply only to the upstream kernel-64k-modules-core package and not the kernel-64k-modules-core package as distributed by Centos.

In the Linux kernel, the following vulnerability has been resolved:

wifi: mac80211: don't WARN for connections on invalid channels

It's not clear (to me) how exactly syzbot managed to hit this, but it seems conceivable that e.g. regulatory changed and has disabled a channel between scanning (channel is checked to be usable by cfg80211_get_ies_channel_number) and connecting on the channel later.

With one scenario that isn't covered elsewhere described above, the warning isn't good, replace it with a (more informative) error message.