Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2025-39919

wifi: mt76: mt7996: add missing check for rx wcid entries

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: add missing check for rx wcid entries Non-station wcid entries must not be passed to the rx functions. In case of the global wcid entry, it could even lead to corruption in the wcid array due to pointer being casted to struct mt7996_sta_link using container_of.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 7464b12b7d92b9641d4664735b9f3c3f0b6173d9 to < 69dcc19048fcdc3fb166fd25b805470ee8fc0eb1affected
  • 7464b12b7d92b9641d4664735b9f3c3f0b6173d9 to < 4a522b01e368eec58d182ecc47d24f49a39e440daffected

Linux Linux

Default version status: affected

  • 6.15affected
  • 0 to < 6.15unaffected
  • 6.16.6 to ≤ 6.16.*unaffected
  • 6.17 to ≤ *unaffected

References