CVE-2025-39864: wifi: cfg80211: fix use-after-free in cmp_bss()
In the Linux kernel, the following vulnerability has been resolved:
wifi: cfg80211: fix use-after-free in cmpbss()
Following bssfree() quirk introduced in commit 776b3580178f ("cfg80211: track hidden SSID networks properly"), adjust cfg80211updateknownbss() to free the last beacon frame elements only if they're not shared via the corresponding 'hiddenbeaconbss' pointer.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-39864?
CVE-2025-39864 has been classified with a severity level that indicates a significant risk to the Linux kernel.
How do I fix CVE-2025-39864?
To mitigate CVE-2025-39864, users should update their Linux kernel to the latest stable version that includes the fix for this vulnerability.
What systems are affected by CVE-2025-39864?
CVE-2025-39864 affects all versions of the Linux kernel that are susceptible to the use-after-free issue in cfg80211.
What type of vulnerability is CVE-2025-39864?
CVE-2025-39864 is categorized as a use-after-free vulnerability within the Linux kernel's cfg80211 component.
What impact does CVE-2025-39864 have on system security?
If exploited, CVE-2025-39864 could potentially allow an attacker to execute arbitrary code in the context of the kernel.