CVE-2025-21828 is a medium severity vulnerability in the Linux kernel's mac80211 Wi-Fi subsystem. It occurs when a station (STA) that is pre-moved to AUTHORIZED state fails insertion and is freed without the driver being aware. Subsequent attempts to flush this non-uploaded STA can cause a crash. This issue has been fixed by checking if the STA was uploaded to the driver before flushing.