CVE-2025-39919: wifi: mt76: mt7996: add missing check for rx wcid entries
In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76: mt7996: add missing check for rx wcid entries
Non-station wcid entries must not be passed to the rx functions. In case of the global wcid entry, it could even lead to corruption in the wcid array due to pointer being casted to struct mt7996stalink using containerof.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-39919?
CVE-2025-39919 is classified as a moderate severity vulnerability in the Linux kernel.
How do I fix CVE-2025-39919?
To fix CVE-2025-39919, update to the latest version of the Linux kernel where this vulnerability has been resolved.
What systems are affected by CVE-2025-39919?
CVE-2025-39919 affects the Linux kernel, specifically targeting the mt76 driver for devices using the mt7996 chipset.
What are the potential consequences of CVE-2025-39919?
Exploiting CVE-2025-39919 could lead to memory corruption and instability in network communications.
Is there a workaround for CVE-2025-39919?
There are no specific workarounds for CVE-2025-39919; updating the kernel is the recommended approach.