Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2025-38600

wifi: mt76: mt7925: fix off by one in mt7925_mcu_hw_scan()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: fix off by one in mt7925_mcu_hw_scan() The ssid->ssids[] and sreq->ssids[] arrays have MT7925_RNR_SCAN_MAX_BSSIDS elements so this >= needs to be > to prevent an out of bounds access.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 8284815ca161e0fa0861cc4085f1c0141e10a34d to < 4d80d4fa986c5da99042b66bf30a028e7f564156affected
  • 8284815ca161e0fa0861cc4085f1c0141e10a34d to < b3a431fe2e399b2e0cc5f43f7e9d63d63d3710eeaffected

Linux Linux

Default version status: affected

  • 6.16affected
  • 0 to < 6.16unaffected
  • 6.16.1 to ≤ 6.16.*unaffected
  • 6.17 to ≤ *unaffected

References