CVE-2025-39919

CVE-2025-39919

High · published October 1, 2025

CVSS v3.1
8.8
EPSS
0%
Percentile
7.6
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

wifi: mt76: mt7996: add missing check for rx wcid entries

Non-station wcid entries must not be passed to the rx functions.

In case of the global wcid entry, it could even lead to corruption in the wcid

array due to pointer being casted to struct mt7996_sta_link using container_of.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00184 · 7.6th percentile
Published
2025-10-01T12:15Z
Affected products (5)
ProductVersionsFixed in
linux/linux_kernel≥ 6.15, < 6.16.66.16.6
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (2)
https://git.kernel.org/stable/c/4a522b01e368eec58d182ecc47d24f49a39e440d · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/69dcc19048fcdc3fb166fd25b805470ee8fc0eb1 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 01 OCT 07:55Z
    wifi: mt76: mt7996: add missing check for rx wcid entries
    cvelistv5