CVE-2025-21905 is a high-severity vulnerability in the Linux kernel's iwlwifi driver. It involves improper handling of strings from firmware files where the string may not be NUL-terminated, potentially causing out-of-bounds reads beyond the end of the TLV or even the file buffer. This flaw can lead to a high-impact confidentiality breach and denial of service. The vulnerability is addressed by limiting the print format to the size of the available buffer to prevent over-read.