CVE-2025-39849: wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result()
In the Linux kernel, the following vulnerability has been resolved:
wifi: cfg80211: sme: cap SSID length in cfg80211connectresult()
If the ssid->datalen is more than IEEE80211MAXSSIDLEN (32) it would lead to memory corruption so add some bounds checking.
Other sources
In the Linux kernel, the following vulnerability has been resolved:
wifi: cfg80211: sme: cap SSID length in cfg80211connectresult()
If the ssid-datalen is more than IEEE80211MAXSSIDLEN (32) it would lead to memory corruption so add some bounds checking.
— IBM
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-39849?
CVE-2025-39849 is considered a high-severity vulnerability due to the risk of memory corruption.
How do I fix CVE-2025-39849?
To fix CVE-2025-39849, upgrade your Linux Kernel to a version that includes the patch addressing this vulnerability.
How does CVE-2025-39849 affect system security?
CVE-2025-39849 can lead to potential system crashes or arbitrary code execution by allowing memory corruption.
What versions of the Linux Kernel are affected by CVE-2025-39849?
CVE-2025-39849 affects multiple versions of the Linux Kernel prior to the patch implementation.
What type of attack can exploit CVE-2025-39849?
Exploitation of CVE-2025-39849 can occur through crafted SSID inputs that exceed the maximum length, leading to memory corruption.