CVE-2025-39849: wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result()
In the Linux kernel, the following vulnerability has been resolved:
wifi: cfg80211: sme: cap SSID length in cfg80211connectresult()
If the ssid->datalen is more than IEEE80211MAXSSIDLEN (32) it would lead to memory corruption so add some bounds checking.
Other sources
In the Linux kernel, the following vulnerability has been resolved:
wifi: cfg80211: sme: cap SSID length in cfg80211connectresult()
If the ssid-datalen is more than IEEE80211MAXSSIDLEN (32) it would lead to memory corruption so add some bounds checking.
— IBM
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.115-2Fixed in 7.2.12-1Fixed in 7.2.15-1 - Compensating control
In cfg80211 SME __cfg80211_connect_result(), cap SSID length and add bounds checking so ssid->datalen cannot exceed IEEE80211_MAX_SSID_LEN (32).
Event History
Frequently Asked Questions
What is the severity of CVE-2025-39849?
CVE-2025-39849 is considered a high-severity vulnerability due to the risk of memory corruption.
How do I fix CVE-2025-39849?
To fix CVE-2025-39849, upgrade your Linux Kernel to a version that includes the patch addressing this vulnerability.
How does CVE-2025-39849 affect system security?
CVE-2025-39849 can lead to potential system crashes or arbitrary code execution by allowing memory corruption.
What versions of the Linux Kernel are affected by CVE-2025-39849?
CVE-2025-39849 affects multiple versions of the Linux Kernel prior to the patch implementation.
What type of attack can exploit CVE-2025-39849?
Exploitation of CVE-2025-39849 can occur through crafted SSID inputs that exceed the maximum length, leading to memory corruption.