CVE-2025-39919 — Linux vulnerability

5 documents5 sources
Severity
5.5MEDIUMNVD
EPSS
0.0%
top 94.52%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
LinuxLinux KernelDebian Linux
Timeline
PublishedOct 1

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: add missing check for rx wcid entries Non-station wcid entries must not be passed to the rx functions. In case of the global wcid entry, it could even lead to corruption in the wcid array due to pointer being casted to struct mt7996_sta_link using container_of.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages4 packages

▶NVDlinux/linux_kernel6.15 — 6.16.6+1
▶Debianlinux/linux_kernel< 6.16.6-1
▶CVEListV5linux/linux7464b12b7d92b9641d4664735b9f3c3f0b6173d9 — 69dcc19048fcdc3fb166fd25b805470ee8fc0eb1+2
▶debiandebian/linux< linux 6.16.6-1 (forky)

Patches

Patch: git.kernel.org ↗Patch: git.kernel.org ↗

🔴Vulnerability Details

2
OSV
CVE-2025-39919: In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: add missing check for rx wcid entries Non-station wcid entries↗2025-10-01
▶
GHSA
GHSA-92m9-hvpm-8m3c: In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: add missing check for rx wcid entries Non-station wcid entri↗2025-10-01
▶

📋Vendor Advisories

2
Red Hat
kernel: wifi: mt76: mt7996: add missing check for rx wcid entries↗2025-10-01
▶
Debian
CVE-2025-39919: linux - In the Linux kernel, the following vulnerability has been resolved: wifi: mt76:...↗2025
▶
CVE-2025-39919 — Linux vulnerability | cvebase