CVE-2025-38600: wifi: mt76: mt7925: fix off by one in mt7925_mcu_hw_scan()
In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76: mt7925: fix off by one in mt7925mcuhwscan()
The ssid->ssids[] and sreq->ssids[] arrays have MT7925RNRSCANMAXBSSIDS elements so this >= needs to be > to prevent an out of bounds access.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-38600?
CVE-2025-38600 has been rated as a medium severity vulnerability due to its potential for out of bounds access.
How do I fix CVE-2025-38600?
To fix CVE-2025-38600, update the Linux kernel to a version that includes the patch addressing this vulnerability.
Which Linux kernel versions are affected by CVE-2025-38600?
CVE-2025-38600 affects certain versions of the Linux kernel that utilize the mt76 driver.
What are the implications of CVE-2025-38600?
If exploited, CVE-2025-38600 could lead to application crashes or arbitrary code execution due to memory access violations.
Is CVE-2025-38600 related to Wi-Fi functionality?
Yes, CVE-2025-38600 specifically impacts Wi-Fi functionality in devices that use the mt7925 driver.